Analysis
-
max time kernel
151s -
max time network
152s -
platform
windows7_x64 -
resource
win7v20201028 -
submitted
11-04-2021 11:44
Static task
static1
Behavioral task
behavioral1
Sample
Reimage_Pc_Repair_keygen_by_KeygenNinja.exe
Resource
win7v20201028
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Reimage_Pc_Repair_keygen_by_KeygenNinja.exe
Resource
win10v20201028
azorulticedidponyredlinevidar1925120085bankerdiscoveryevasioninfostealerpersistenceratspywarestealertrojan
windows10_x64
0 signatures
0 seconds
General
-
Target
Reimage_Pc_Repair_keygen_by_KeygenNinja.exe
-
Size
5.3MB
-
MD5
e3a4794401060fa47210b473285399d0
-
SHA1
ea14af2b4c7fa2c57654640e8084ccbac3b30914
-
SHA256
97557fd5c3cb5632347d4fcf97c38613c82c47452895616b910d92ed4aa80a94
-
SHA512
fb869fc24f4c5e99dcc7b19a9a832c6d7066d5d8d1c057fdfe41ebc80c29483bdb0d3c3d3a242740bf898dec9a5f89d03ce4650d8942bffc3731363b0e1596a1
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
Processes:
vlc.exepid process 1532 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
vlc.exepid process 1532 vlc.exe -
Suspicious use of FindShellTrayWindow 4 IoCs
Processes:
vlc.exepid process 1532 vlc.exe 1532 vlc.exe 1532 vlc.exe 1532 vlc.exe -
Suspicious use of SendNotifyMessage 3 IoCs
Processes:
vlc.exepid process 1532 vlc.exe 1532 vlc.exe 1532 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
vlc.exepid process 1532 vlc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Reimage_Pc_Repair_keygen_by_KeygenNinja.exe"C:\Users\Admin\AppData\Local\Temp\Reimage_Pc_Repair_keygen_by_KeygenNinja.exe"1⤵
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1076-59-0x0000000075711000-0x0000000075713000-memory.dmpFilesize
8KB