Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
11-10-2024 20:59
Static task
static1
Behavioral task
behavioral1
Sample
八年级物理上册 01.声现象知识总结,声音的反射—蝙蝠捕食,应用回声测距离�.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
八年级物理上册 01.声现象知识总结,声音的反射—蝙蝠捕食,应用回声测距离�.exe
Resource
win10v2004-20241007-en
General
-
Target
八年级物理上册 01.声现象知识总结,声音的反射—蝙蝠捕食,应用回声测距离�.exe
-
Size
984KB
-
MD5
e49bcacb7f274efe7b9f1b682cdb41e4
-
SHA1
92e6a8773fda1635854179459b5f34c99dfd21b5
-
SHA256
e2a639f00ffc8e2c0d4a71d19b1e21430f508958bd1485c01414e69f6e756523
-
SHA512
d275b30ca6eb00b8ded12f89478a92e089c3e6c3b91e89fddb12429d6770588f77313a2b1d287694a0595af5e2842ab2b890314260467404dd42e41c76721972
-
SSDEEP
12288:Omy5eJWE924wtdk9Czy6WyLwIrlYBXe2oqLCpELjuteaKvew5tXxTbeTF2jD:O5oDL9CTLlYMWuCUe1WUtXZq+
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 八年级物理上册 01.声现象知识总结,声音的反射—蝙蝠捕食,应用回声测距离�.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2524 八年级物理上册 01.声现象知识总结,声音的反射—蝙蝠捕食,应用回声测距离�.exe