Overview
overview
7Static
static
7我爱记�...Ps.dll
windows7-x64
1我爱记�...Ps.dll
windows10-2004-x64
1我爱记�...fo.dll
windows7-x64
3我爱记�...fo.dll
windows10-2004-x64
3我爱记�...��.exe
windows7-x64
7我爱记�...��.exe
windows10-2004-x64
1我爱记�...��.exe
windows7-x64
7我爱记�...��.exe
windows10-2004-x64
7我爱记�...��.exe
windows7-x64
1我爱记�...��.exe
windows10-2004-x64
1Analysis
-
max time kernel
117s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
25-06-2024 19:32
Behavioral task
behavioral1
Sample
我爱记牌器/ComPs.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
我爱记牌器/ComPs.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
我爱记牌器/VerInfo.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
我爱记牌器/VerInfo.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
我爱记牌器/去后台链接补丁.exe
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
我爱记牌器/去后台链接补丁.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
我爱记牌器/我爱记牌器.exe
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
我爱记牌器/我爱记牌器.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
我爱记牌器/我爱记牌器自动升级.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
我爱记牌器/我爱记牌器自动升级.exe
Resource
win10v2004-20240611-en
General
-
Target
我爱记牌器/我爱记牌器自动升级.exe
-
Size
284KB
-
MD5
3af6d477bc76d21f101d428c106576e7
-
SHA1
6dfea92b2c663cc4b089f97b190aeb1f8b6b8866
-
SHA256
545a0bf15cc57b7559ce96c6e79d842ccbb8e6a9870251580b7e1975f89e414d
-
SHA512
5ed931de9619108db965046022c45506c8c01e6229fc1acfc291f15f94bb402f9205a83607ffd7c255b5e6b2a74df4756f6a3ceb0179bc860ff2f8a2b45f8cb3
-
SSDEEP
6144:/R7ZAkYLHkIO/ZgiddIVFgXQXPXnC+tU/myjNJz:RakYj9O/KicV2SPXnC+tU/m
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2188 我爱记牌器自动升级.exe 2188 我爱记牌器自动升级.exe