Analysis
-
max time kernel
26s -
max time network
56s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
28-09-2022 14:00
General
-
Target
IDA Pro 7.6/qwingraph.exe
-
Size
468KB
-
MD5
bfc0e7a524fe6a1724a802613cca9dc5
-
SHA1
3f88ac12d643205c54d0a6a92e94d0d56c51f904
-
SHA256
30a3bdd95b55a493abe9f0ff8c0b41f64e04cd258f843941bf5902681c3ec933
-
SHA512
99da2e6b3242a0663a059b4d584d50ba86e55b3410975ef10c10e31cde25591f59a30d76e81b3ef7af1779fd3cef5bdfd32954f9431da3aebe593c345edb4eea
-
SSDEEP
6144:tU32mf5bt2aDPg1hMxvrsFho+vrehv8o0jNcHvvfSxIkJXhxFpMULYgn:tUmmfBtdDPACxvrM+81iHvvfSxxZyUL
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\IDA Pro 7.6\qwingraph.exe"C:\Users\Admin\AppData\Local\Temp\IDA Pro 7.6\qwingraph.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x42c 0x4e81⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.4MB