3f8ec3ac729285705bbeff69bad1edada368ef5241d91d3eee878e4b0856bf52

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
27/06/2024, 21:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

泽华音乐/Radio.exe
Size

2.0MB
MD5

a39fa67dc751f6795eac59119c16c783
SHA1

9884a40700b0df38dc69de0320624fca58efd68a
SHA256

44012273c78b5f75b62ae0e5ac999abe9403c3773228298f8a6f6b29626c105e
SHA512

41e965d77a642c5076f8766097e14b1f7ef6d86d1c1be3ff29bdbc5acc639c73f9695b4145b5c0d6291edf0b6b80ff1eb45d4fd9f0ff070404380a0594f6a3fc
SSDEEP

12288:d3A2b3ztg7QGNY6Cr8stBmJ3jUfOl1YWGFSqjsm4Foazsk:BAyGNY6Cr8stBC3jfEWGFSqjsm4F

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2228	Radio.exe

C:\Users\Admin\AppData\Local\Temp\泽华音乐\Radio.exe
"C:\Users\Admin\AppData\Local\Temp\泽华音乐\Radio.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2228

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2228-2-0x00000000033C0000-0x0000000003E7A000-memory.dmp

Filesize
10.7MB

Download