Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    11-10-2024 20:59

General

  • Target

    八年级物理上册 01.声现象知识总结,声音的反射—蝙蝠捕食,应用回声测距离�.exe

  • Size

    984KB

  • MD5

    e49bcacb7f274efe7b9f1b682cdb41e4

  • SHA1

    92e6a8773fda1635854179459b5f34c99dfd21b5

  • SHA256

    e2a639f00ffc8e2c0d4a71d19b1e21430f508958bd1485c01414e69f6e756523

  • SHA512

    d275b30ca6eb00b8ded12f89478a92e089c3e6c3b91e89fddb12429d6770588f77313a2b1d287694a0595af5e2842ab2b890314260467404dd42e41c76721972

  • SSDEEP

    12288:Omy5eJWE924wtdk9Czy6WyLwIrlYBXe2oqLCpELjuteaKvew5tXxTbeTF2jD:O5oDL9CTLlYMWuCUe1WUtXZq+

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\八年级物理上册 01.声现象知识总结,声音的反射—蝙蝠捕食,应用回声测距离�.exe
    "C:\Users\Admin\AppData\Local\Temp\八年级物理上册 01.声现象知识总结,声音的反射—蝙蝠捕食,应用回声测距离�.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2524

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads