Analysis
-
max time kernel
276s -
max time network
269s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
12/06/2024, 21:25
Static task
static1
Behavioral task
behavioral1
Sample
东方boss rush更新器.zip
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
东方boss rush更新器.zip
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
Touhou-BossRush Updater.exe
Resource
win7-20240419-en
Behavioral task
behavioral4
Sample
Touhou-BossRush Updater.exe
Resource
win10v2004-20240611-en
General
-
Target
东方boss rush更新器.zip
-
Size
446KB
-
MD5
92ed8b4b1b203b4678eaa69c644e091d
-
SHA1
4c1c763eb971e80788af68607cf3555b0bab9c14
-
SHA256
a2898a0de80b204f69d9cd614a3bf9bb46a0e0b4546d1b2da34492658ba9e8c6
-
SHA512
a778856d2f6138435774fbc0e9a5b5798d103ccd028c2ed96fb5f2e32696a8d06048f5926bfe693d2ce15b03f4b2d057743c0a0ae4e4d7f39ef70030fb83e90c
-
SSDEEP
12288:GPxpJRuXqYhXm20scwO5zAHH9CG4io5vmItt6Qvv:GPxTRuVpm20sc0kG4j5+IttZ
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\东方boss rush更新器.zip"1⤵PID:4644
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:1688