Analysis
-
max time kernel
90s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
04-07-2024 19:03
General
-
Target
CAD迷你画图/ProDfsShlExplus.exe
-
Size
2.0MB
-
MD5
88482877799f2d68ca0beaf36d679838
-
SHA1
d8cfcd5575363daf2352d5f54216cbe74dd92341
-
SHA256
9fc20a888236e1918a195f23b269c0b031f0c6ec8ce796e9aea28c0f43455fdd
-
SHA512
831f42a56231bf6f83078cba05c1f7f06e1316f49a63d5c7cda6323f05a69a139d03ab7b2d74cd3bc84e74a2cd3507c2812b42a1f45ff88cb4f6fd83d6fe2dfa
-
SSDEEP
49152:+vHQ10oc+LODj31iPgcWAJ+jDCb5tgqtKQKXn+sJ8NTQEoKt:+Q10oPODDEP9J+jDCb5t2QKXZ8NTQE3t
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\CAD迷你画图\ProDfsShlExplus.exe"C:\Users\Admin\AppData\Local\Temp\CAD迷你画图\ProDfsShlExplus.exe"1⤵
- Suspicious use of SetWindowsHookEx