Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
08-06-2024 14:29
General
-
Target
游戏窗口无损缩小放大工具 v2.2.6/LosslessScaling.exe
-
Size
944KB
-
MD5
473c4e73973a8864b88727d3192ac186
-
SHA1
318377286e430a0fd23de1fc6a7c4ce8ac8d30cd
-
SHA256
62ab2440ae2c5cc2a55cd7665c809dbf3c6f036db34f2b36c71c6937c8bf93f9
-
SHA512
0ea881ce3f015728b06ad91dd8764f3cddbd3efc366a0f6255d73fb160736fc51d4aa263bf0b11e27256e4cc191f95c5a4b89ddd819905d175718d3ff70387b8
-
SSDEEP
12288:mPHEDS4MCLSyf6mOuGyW38yHJc+CKtOaO5Z7WhaGwnzE4ZbuRCwmhI2J+0sDzh1p:m2tMCLPf1Oi32OvzTo4ZiRlT/31
Malware Config
Signatures
-
Modifies Control Panel 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\游戏窗口无损缩小放大工具 v2.2.6\LosslessScaling.exe"C:\Users\Admin\AppData\Local\Temp\游戏窗口无损缩小放大工具 v2.2.6\LosslessScaling.exe"1⤵
- Modifies Control Panel
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2KB
MD550bb1f9fe80513b57f8ebcb7348ef42d
SHA1511dd7926dd603c0a99db80cacc019777b48266d
SHA256332e9efa5c32adc92538edd777b2def6f241c24833c4c7490e13928cc40dca5e
SHA5126e654d344ed2020f131f3d86258e2d347b6cc1fa801fd96d0dcabec86ada244fec49658eb462e547bbb6ced0a028e48cac3a362d807321dc335039efd44d917f
-
Filesize
744KB
-
Filesize
40KB
-
Filesize
10.8MB
-
Filesize
32KB
-
Filesize
224KB
-
Filesize
10.8MB
-
Filesize
712KB
-
Filesize
10.8MB
-
Filesize
152KB
-
Filesize
920KB
-
Filesize
8KB
-
Filesize
32KB
-
Filesize
10.8MB
-
Filesize
56KB
-
Filesize
968KB
-
Filesize
8KB
-
Filesize
10.8MB