1dff50e5e24f1639842ed11500efc704d6c78ddf832c6975a145009bd45a6130 | Triage

Analysis

max time kernel
13s
max time network
19s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
15-09-2024 19:48

Sharing

Report Analysis Logs

General

Target

一键关闭win杀毒软件的工具/一键关闭windows defender工具.exe
Size

209KB
MD5

6c3e80698988e854d8acec04665ab867
SHA1

0b460b2ed05aa3540a66c54ceeaee88051c8f5f5
SHA256

d97319994f6ff53d32b4a06804a7e234516aa17b257a5976281a3f48dcac15ea
SHA512

8ea1124dfac6737fc5ca693605309ee8ca86211595529d126b4f342658258923bb7226be5724ae7253d5f00a67753dedf5c9a2fde50922f5487b8b9787c4eb71
SSDEEP

768:33uIAZ95dkfpS5oSAyF9DB27dStPsQ+TxuKOgMBRCpzdkfpS5LgAbun5tobp5:33+Zlk+0pFuZlC/kfQp5

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\一键关闭win杀毒软件的工具\一键关闭windows defender工具.exe
"C:\Users\Admin\AppData\Local\Temp\一键关闭win杀毒软件的工具\一键关闭windows defender工具.exe"
1⤵
PID:2376

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2376-0-0x000007FEF5BF3000-0x000007FEF5BF4000-memory.dmp

Filesize
4KB

Download
memory/2376-1-0x0000000000B90000-0x0000000000BCA000-memory.dmp

Filesize
232KB

Download
memory/2376-2-0x000007FEF5BF0000-0x000007FEF65DC000-memory.dmp

Filesize
9.9MB

Download
memory/2376-3-0x000007FEF5BF3000-0x000007FEF5BF4000-memory.dmp

Filesize
4KB

Download
memory/2376-4-0x000007FEF5BF0000-0x000007FEF65DC000-memory.dmp

Filesize
9.9MB

Download