Analysis

  • max time kernel
    16s
  • max time network
    20s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    20/11/2024, 03:00

General

  • Target

    Petite Health Check!_v1_0/ロリっ子健康診断!.exe

  • Size

    651KB

  • MD5

    2558cbc8983ea60ff2a135d2a235002f

  • SHA1

    ac0aac1938ffeaba79cbbcb863f67776e01de451

  • SHA256

    97efed39dd4a230b218d16c09ffbf6ee8c4110be0d0cda7001d43c0299ae83d6

  • SHA512

    75a1bfcb80be871b79c9ecaaa20c06cb2dbf6b2e75a1fd7ac9eaaa2b5dcf144cef8e2c5a2fea176f930f448f91c1fd896720561b5724fb9de30db99f4c15c660

  • SSDEEP

    12288:O/744aOD8IX5kW3YCBx27RAKYYY4KJIJOgu6rT2AT/FM6:c9aOlVYCBx27RAKYYYr0jM6

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Petite Health Check!_v1_0\ロリっ子健康診断!.exe
    "C:\Users\Admin\AppData\Local\Temp\Petite Health Check!_v1_0\ロリっ子健康診断!.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1956
    • C:\Users\Admin\AppData\Local\Temp\Petite Health Check!_v1_0\UnityCrashHandler64.exe
      "C:\Users\Admin\AppData\Local\Temp\Petite Health Check!_v1_0\UnityCrashHandler64.exe" --attach 1956 2101248
      2⤵
        PID:1972

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1956-1-0x0000000000230000-0x0000000000240000-memory.dmp

      Filesize

      64KB

    • memory/1956-0-0x0000000000240000-0x0000000000250000-memory.dmp

      Filesize

      64KB

    • memory/1956-2-0x0000000062B80000-0x0000000062B90000-memory.dmp

      Filesize

      64KB

    • memory/1956-3-0x0000000062C90000-0x0000000062CA0000-memory.dmp

      Filesize

      64KB

    • memory/1956-4-0x0000000062FF0000-0x0000000063010000-memory.dmp

      Filesize

      128KB

    • memory/1956-5-0x0000000063010000-0x0000000063020000-memory.dmp

      Filesize

      64KB

    • memory/1956-24-0x00000000631A0000-0x00000000631B0000-memory.dmp

      Filesize

      64KB

    • memory/1956-25-0x00000000631C0000-0x00000000631D0000-memory.dmp

      Filesize

      64KB

    • memory/1956-27-0x0000000000230000-0x0000000000240000-memory.dmp

      Filesize

      64KB

    • memory/1956-26-0x0000000000240000-0x0000000000250000-memory.dmp

      Filesize

      64KB

    • memory/1956-28-0x00000000631D0000-0x00000000631E0000-memory.dmp

      Filesize

      64KB

    • memory/1956-29-0x000007FFFFEB0000-0x000007FFFFEC0000-memory.dmp

      Filesize

      64KB

    • memory/1956-43-0x000007FFFFEA0000-0x000007FFFFEB0000-memory.dmp

      Filesize

      64KB

    • memory/1956-46-0x0000000063690000-0x00000000636A0000-memory.dmp

      Filesize

      64KB

    • memory/1956-45-0x0000000062B80000-0x0000000062B90000-memory.dmp

      Filesize

      64KB

    • memory/1956-47-0x0000000062C90000-0x0000000062CA0000-memory.dmp

      Filesize

      64KB

    • memory/1956-48-0x0000000062FF0000-0x0000000063010000-memory.dmp

      Filesize

      128KB

    • memory/1956-49-0x0000000063010000-0x0000000063020000-memory.dmp

      Filesize

      64KB

    • memory/1956-50-0x00000000631A0000-0x00000000631B0000-memory.dmp

      Filesize

      64KB

    • memory/1956-51-0x00000000631C0000-0x00000000631D0000-memory.dmp

      Filesize

      64KB

    • memory/1956-52-0x00000000631D0000-0x00000000631E0000-memory.dmp

      Filesize

      64KB

    • memory/1956-53-0x0000000063690000-0x00000000636A0000-memory.dmp

      Filesize

      64KB