11bf3d0cce965adaf516ad534ecea34a5f4ad885a77fcbc44922ac520b208705 | Triage

Sharing

General

Target

键鼠废(HOOK).rar
Size

6.4MB
Sample

240824-qvrm3asejf
MD5

020e711f5b5a739071c2fed5f0d0a149
SHA1

23a134e10d06a880de081e606295adf406856fc3
SHA256

11bf3d0cce965adaf516ad534ecea34a5f4ad885a77fcbc44922ac520b208705
SHA512

779062cb2d0d41d9a659110668611abcd475b6c8b5f198ea3e8691db08e01079c5d1fce8ce1e8bd61ec6bd2a7190ecfe3cbc7e10fa2d8d81084b82a5d7827b95
SSDEEP

196608:GUYoVD7UFWFhg9tQh4NiRw6vFJVSjAAnfHg5:oGIFWFhNh5RvE8AHg5

Score

3^/10

discovery

Malware Config

Targets

- Target
  
  键鼠废(HOOK)/键鼠废(HOOK)/键盘废.exe
- Size
  
  820KB
- MD5
  
  1121dc08bd2ad29c2c948aeadee3d6ce
- SHA1
  
  acd61e161147d6d7e1b9b355d47cbc26a941b3d0
- SHA256
  
  ab8a97d140ac7dcad2824757f7db9f9bd0dc6af8007efc7e96c3fc77757de7a5
- SHA512
  
  3a26248e8b0db58449d7e2041bef8281a4198c8d68dc3385f0394a70730e67199a182d8d8584d26549cfeabbd21d8a074326213c5b7c2fbd0d25bcfc12ff68d8
- SSDEEP
  
  12288:4qeW6YN6K/vEYVxFWkqgDMaWiQ69aZbNPYf9JvaieiSmVyb:4qePYNNsYLFWkqizWd6lvTeiL8
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  
  键鼠废(HOOK)/键鼠废(HOOK)/鼠标废.exe
- Size
  
  820KB
- MD5
  
  5c88ea1b37a4368b78657ce4ffe474eb
- SHA1
  
  c9f0ef56b521c7e1f48ad2fba16cd1191096bd59
- SHA256
  
  4aa0bdee13f32d9335f56383ccbf0214be1e1bee5efc4594626ce98f6c6cb646
- SHA512
  
  48ad9a3c76001b9bdacc251ff7616a44f1ed69deed682a69334231ac31324758c66b450909dad04ae4e53c4407c9ad20d7de035a0f1514d1969962620a24f278
- SSDEEP
  
  12288:oMZW6YN6K/vEYVxFWkqgDMaWiQ69aZbNPYf9JvaieiS2Myb:oMZPYNNsYLFWkqizWd6lvTei28
Score

3^/10

discovery
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4