232b88f022b29606ea71562be8c6d7efec87137357ed1a35fa1a05c8086dab4c | Triage

Analysis

max time kernel
132s
max time network
132s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
01-07-2024 18:01

Sharing

Report Analysis Logs

General

Target

44017993/第1章串口编程调试精灵/SerialApp.exe
Size

56KB
MD5

c28d4628c1fc0b8a9424dd6348365d50
SHA1

2d91147badbc6708d968792ec8b27863252aabd7
SHA256

da44bb3d56768279636f3b4f9a1bf916bbfed48b1318a1d1dc8811e9d5ad9e4c
SHA512

207b01a6e7a7496e0f7eb8e69fb85873115bdfc6a0dd84ada724e471e02e9d9f9215dd42b95db374e8a0ce06534c2b3e2fd859e3aaa34315d326f5af26429a6e
SSDEEP

768:oEbNDl9MHZujsAQVfyzmY2YWNLjtdkJoBt8h2xQV7E:TNDl9MHEayi9E2SE

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3364	SerialApp.exe

C:\Users\Admin\AppData\Local\Temp\44017993\第1章串口编程调试精灵\SerialApp.exe
"C:\Users\Admin\AppData\Local\Temp\44017993\第1章串口编程调试精灵\SerialApp.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3364

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=2312,i,16866810346450717340,3849854439116899380,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:8
1⤵
PID:4844

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads