Overview

overview

8

Static

static

3

record2005...rd.exe

windows7-x64

1

record2005...rd.exe

windows10-2004-x64

1

record2005...LK.sys

windows7-x64

1

record2005...LK.sys

windows10-2004-x64

1

record2005...t1.dll

windows7-x64

8

record2005...t1.dll

windows10-2004-x64

8

record2005...me.exe

windows7-x64

1

record2005...me.exe

windows10-2004-x64

1

record2005...on.dll

windows7-x64

3

record2005...on.dll

windows10-2004-x64

3

record2005...or.exe

windows7-x64

1

record2005...or.exe

windows10-2004-x64

1

record2005...ck.exe

windows7-x64

1

record2005...ck.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    127s
  • max time network
    124s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/06/2024, 13:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    record2005/tool/时间之神/PORTTALK.sys

  • Size

    3KB

  • MD5

    7d5a2d755b6c6579f63657b527d6ff1b

  • SHA1

    fd7d864b96bafa21a76128bfb02dcccb57eddad6

  • SHA256

    a2b44785fa6be4a2a723b06b906f6c48dead63acc0f787cf9a0890eed47f9d0c

  • SHA512

    78908dc49b8463167b5b72be4e9ba436d583e4e97bcfc4a3505997cb99495146a6749ca7c2b680be840abf554744b18b87fa09abcb87d4e26104920ac230c9d8

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\record2005\tool\时间之神\PORTTALK.sys
    1⤵
      PID:4028
      • C:\Users\Admin\AppData\Local\Temp\record2005\tool\时间之神\PORTTALK.sys
        C:\Users\Admin\AppData\Local\Temp\record2005\tool\时间之神\PORTTALK.sys
        2⤵
          PID:1380

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads