7882eab29859c18474d3674f7802e17c2c78616f3dc9c5afbba04bd30db1b213 | Triage

Analysis

max time kernel
89s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
04-07-2024 19:03

Sharing

Report Analysis Logs

General

Target

CAD迷你画图/CAD迷你画图.exe
Size

58.8MB
MD5

8618247cd1d9147e819d443b6c07cc3c
SHA1

1ba07cfc8ed6b990dfcd60a12527f7cdd8699ea1
SHA256

e623a013196f5d9c2ae248091c835fb1291a1d30f552d9fbf74af3be622a713c
SHA512

1ffa13f18da4815f6fdd548f09a599007c441980bdac448d8740abfe5458532d7de185bc8f0970c54df499c2ec7160a55936074a8d02e15b8c2c7be2dc5bc189
SSDEEP

1572864:/FcaaoFSyHS+dLzEaBo4SpF7C1lIelaoepL4XzLld6DT:/iCwWf6DT

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

CAD迷你画图.exe

pid	Process
812	CAD迷你画图.exe
812	CAD迷你画图.exe

Suspicious use of SetWindowsHookEx 11 IoCs

Processes:

CAD迷你画图.exe

pid	Process
812	CAD迷你画图.exe
812	CAD迷你画图.exe
812	CAD迷你画图.exe
812	CAD迷你画图.exe
812	CAD迷你画图.exe
812	CAD迷你画图.exe
812	CAD迷你画图.exe
812	CAD迷你画图.exe
812	CAD迷你画图.exe
812	CAD迷你画图.exe
812	CAD迷你画图.exe

C:\Users\Admin\AppData\Local\Temp\CAD迷你画图\CAD迷你画图.exe
"C:\Users\Admin\AppData\Local\Temp\CAD迷你画图\CAD迷你画图.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:812

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads