Analysis
-
max time kernel
117s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
19/07/2024, 16:47
General
-
Target
保姆小黑_V2.32-QQ摩天大楼辅助_By_Loading/运行不了点击这个文件.exe
-
Size
321KB
-
MD5
267ec13451ac39cbf3a3769bfa90aacd
-
SHA1
28445007c2bca799293c42c34121d27d1e8314d1
-
SHA256
59bcc8f593c1429246e7c7267c33b28e406f61d1c3d216785167fd8cc6329f6e
-
SHA512
be0c8962a55869e4b60969d7a34577fb6fa715311dfe59426c69decea7fcbfe15cbd1bdee365db07c4647562864f6548bf635566e9fd732ea8f0267aad3e59b6
-
SSDEEP
6144:V0FQlfjpUlCubGJpLT7iHSw2KQVOEhDhLTO8J6X96agtaT:kCiW34QIEhDhO8J49Q0T
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\保姆小黑_V2.32-QQ摩天大楼辅助_By_Loading\运行不了点击这个文件.exe"C:\Users\Admin\AppData\Local\Temp\保姆小黑_V2.32-QQ摩天大楼辅助_By_Loading\运行不了点击这个文件.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx