Analysis
-
max time kernel
141s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
29/08/2024, 02:38
General
-
Target
古典四大名著连环画珍藏版(EXE)/水浒传连环画.exe
-
Size
5.0MB
-
MD5
88921973c0035ae46585535f80b8510b
-
SHA1
33bbbf6f37df24e0b73fc328527137933b731619
-
SHA256
40c768ee5aa3e273f6a1ec4fa8fe4f453e65b602b828b98942991cb4638f84ce
-
SHA512
740b6905bf0e17c745ddeea0fba287b86e5e774e8802dea5e6ab8ffa2c78efb4f9d5db9130f2128b6ac7e73c6a0f7ca9c8a17292add4eaf7742ab68152a55c93
-
SSDEEP
98304:gFNedF94KaPH/Gjop8jVI/acQXiCPjcSw0xUodK:kwC/6cQc6iCPYj4VdK
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies registry class 6 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\古典四大名著连环画珍藏版(EXE)\水浒传连环画.exe"C:\Users\Admin\AppData\Local\Temp\古典四大名著连环画珍藏版(EXE)\水浒传连环画.exe"1⤵
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
836KB
-
Filesize
836KB