Analysis
-
max time kernel
10s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
04/10/2024, 18:23
General
-
Target
《LP仿传奇单机版》V3.1属性修改器/LP仿傳奇單機版3.1修改器.exe
-
Size
2.1MB
-
MD5
1d3e6885ae7ce0110bd85957bee01b76
-
SHA1
df5c47b74daf1b8b6dfd2e7ce791b9f1ff37d6a0
-
SHA256
7f9b97c74f1038fa08efa62548e38ce9c9584aeb7f999851c0e006d468ad70ac
-
SHA512
e1497c097d0eca0a35e591bb78cd8d4b0150d48d355ee3fdb139f58a762e750c342d2c0368daf6a737797a5af9a0090127d78eb2e7099309a1908c2a6ac10aae
-
SSDEEP
12288:jRj/cfOfBYGKEGbFt1mXBMVIxeHstrVlqK3JXYKxUoeO68MdlVvaM0i:FcfmKEGbT1mX+EeM9NWq+
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\《LP仿传奇单机版》V3.1属性修改器\LP仿傳奇單機版3.1修改器.exe"C:\Users\Admin\AppData\Local\Temp\《LP仿传奇单机版》V3.1属性修改器\LP仿傳奇單機版3.1修改器.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx