Analysis

  • max time kernel
    140s
  • max time network
    94s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15-07-2024 04:24

General

  • Target

    帐号管家/IDMgr.exe

  • Size

    342KB

  • MD5

    b3c95c13d89b482231ab4964542d69f3

  • SHA1

    586ac4c3d91dde7b6d0e3aac5978ecebbf4f42d1

  • SHA256

    7cafcbf868266684782de363cf0a3ac74336133a352fdfc903c92864ff0f2b1a

  • SHA512

    2b9735244eed27d2c68e2e2ea77c8484f89b1d63186ddb383100d751ed09f1d5e14a259986245dbedc9ba27380f194bc33fec4376e81d025b7ff97ead2162295

  • SSDEEP

    6144:nnjTcErBbq3iMD5qEy300PuHFWbSxFai8Brov11Ac3YU9fWFGaFx5oS3u8g:njTcE9n2Ty3b4nFJYrc11pGH5oS3u8

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\帐号管家\IDMgr.exe
    "C:\Users\Admin\AppData\Local\Temp\帐号管家\IDMgr.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2736

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2736-0-0x0000000000400000-0x0000000000507000-memory.dmp

    Filesize

    1.0MB

  • memory/2736-1-0x0000000000400000-0x0000000000507000-memory.dmp

    Filesize

    1.0MB

  • memory/2736-2-0x0000000000400000-0x0000000000507000-memory.dmp

    Filesize

    1.0MB