Analysis
-
max time kernel
140s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
25/08/2024, 03:26
General
-
Target
格子网络.exe
-
Size
517KB
-
MD5
0ee68d8968cda71da859e0b3095e53eb
-
SHA1
79037a7c5573c8b99e880c05173ad7785a495e21
-
SHA256
e21e3ee71cb1db8f15e4a3216f227e3fc4eb4025effafb0cc69f44ea64ddbd92
-
SHA512
a6dd34d328e4a414610f1e7bd758c925a7a4ef68d60d3c272200356e72c0ebbbf95943cec5de6191858705553c2ba18faefd5b28da2e83834249b18f3e344eb0
-
SSDEEP
6144:kDpe8vRYr/ocLhJ2t/5aSZo7Gjbu2U7xIxTqvpdi3D6YRmlYaf7ja3NoKh1MPhSP:kD08Gr/zLr22Io7GjnTofeD66EP6NoJ
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\格子网络.exe"C:\Users\Admin\AppData\Local\Temp\格子网络.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.4MB
-
Filesize
4KB
-
Filesize
1.4MB
-
Filesize
4KB