Analysis
-
max time kernel
140s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
15-07-2024 04:24
Behavioral task
behavioral1
Sample
帐号管家/IDMgr.exe
Resource
win7-20240705-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
帐号管家/IDMgr.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
帐号管家/IDMgr.exe
-
Size
342KB
-
MD5
b3c95c13d89b482231ab4964542d69f3
-
SHA1
586ac4c3d91dde7b6d0e3aac5978ecebbf4f42d1
-
SHA256
7cafcbf868266684782de363cf0a3ac74336133a352fdfc903c92864ff0f2b1a
-
SHA512
2b9735244eed27d2c68e2e2ea77c8484f89b1d63186ddb383100d751ed09f1d5e14a259986245dbedc9ba27380f194bc33fec4376e81d025b7ff97ead2162295
-
SSDEEP
6144:nnjTcErBbq3iMD5qEy300PuHFWbSxFai8Brov11Ac3YU9fWFGaFx5oS3u8g:njTcE9n2Ty3b4nFJYrc11pGH5oS3u8
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2736-0-0x0000000000400000-0x0000000000507000-memory.dmp upx behavioral2/memory/2736-1-0x0000000000400000-0x0000000000507000-memory.dmp upx behavioral2/memory/2736-2-0x0000000000400000-0x0000000000507000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2736 IDMgr.exe 2736 IDMgr.exe