Analysis

  • max time kernel
    151s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7v20201028
  • submitted
    11-04-2021 11:44

General

  • Target

    Reimage_Pc_Repair_keygen_by_KeygenNinja.exe

  • Size

    5.3MB

  • MD5

    e3a4794401060fa47210b473285399d0

  • SHA1

    ea14af2b4c7fa2c57654640e8084ccbac3b30914

  • SHA256

    97557fd5c3cb5632347d4fcf97c38613c82c47452895616b910d92ed4aa80a94

  • SHA512

    fb869fc24f4c5e99dcc7b19a9a832c6d7066d5d8d1c057fdfe41ebc80c29483bdb0d3c3d3a242740bf898dec9a5f89d03ce4650d8942bffc3731363b0e1596a1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of SendNotifyMessage 3 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Reimage_Pc_Repair_keygen_by_KeygenNinja.exe
    "C:\Users\Admin\AppData\Local\Temp\Reimage_Pc_Repair_keygen_by_KeygenNinja.exe"
    1⤵
      PID:1076
    • C:\Program Files\VideoLAN\VLC\vlc.exe
      "C:\Program Files\VideoLAN\VLC\vlc.exe"
      1⤵
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      PID:1532

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1076-59-0x0000000075711000-0x0000000075713000-memory.dmp
      Filesize

      8KB