Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
17/08/2024, 01:10
General
-
Target
对时软件.exe
-
Size
272KB
-
MD5
a07d6dec61c2886c2a13fe47880a3417
-
SHA1
238b2d0601ff6b099e2ed3344eaa1bf06d981df7
-
SHA256
ee288d08f6587202063b3ba278ec57d1791d3e675ff017a61563ffd5d81ef62f
-
SHA512
32beec8b53542c5d5c5b2503c9825cefcef9030b63215f7eefd8660e790d7a2bec11b0cadae34b14c5d5d5ee234091acfca72b8fdc13110554bd9ccf8d9f8998
-
SSDEEP
3072:HAguMYnaddjSTW0fBL1/fAZ2NJujlStdacGzlipysorMH68VusiGtzswNFyRVbo+:Htiej0fBLBPCjlSizIysr0wN8LSSs
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\对时软件.exe"C:\Users\Admin\AppData\Local\Temp\对时软件.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx