Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
25-06-2024 07:57
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
kt/梦幻海底巴别圣塔自动开通器.exe
Resource
win7-20231129-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
kt/梦幻海底巴别圣塔自动开通器.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
kt/梦幻海底巴别圣塔自动开通器.exe
-
Size
50KB
-
MD5
9e4ae28f22aa4a2d25717184ad490c54
-
SHA1
6845afd0590ef9103c195c5f5bd466214f9f88cb
-
SHA256
b850877d237c034447a69ae6c196162102848f0fc4db684c5a13ad9e96ed8897
-
SHA512
e0f7c4a626b72f4e78e2d08352a28ac1dda0343aa2f540d8054b6f82cb222ca1ad87443d3551549edc4d5f8cfa9bd4a59c7f729281ab6b98eb88f1c081454b3f
-
SSDEEP
768:idPUIR+Tny03HVKp8aME9c7gGa0GKOHvTnPPIfGzyyellpxFo3MWKc:idmny8/aME9c7gGTlMTPPI7jU3Mzc
Score
1/10
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3004 梦幻海底巴别圣塔自动开通器.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 3004 梦幻海底巴别圣塔自动开通器.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3004 梦幻海底巴别圣塔自动开通器.exe 3004 梦幻海底巴别圣塔自动开通器.exe