Analysis
-
max time kernel
36s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
27-11-2022 18:55
General
-
Target
10901268/10901268/DeSmuME_VS2008_NoConsole.exe
-
Size
3.8MB
-
MD5
12c5097e3e64826d8cffc365e4770f61
-
SHA1
2061a1b2ad450ccfb6340e9674154122cc6eb2d5
-
SHA256
3660ba2822c5db7ae0af1c415328b67fab9ecbc21d79089053c32e09c5d412bc
-
SHA512
4d0fec570ebb63bfe8c4c546ee925eb5e9590494f5ce8b8da22ec3ee6bd35e400d5e76cc4785e869df18c5ba2fdf589002b72a7d29847fb632c3eaba02c3bb24
-
SSDEEP
49152:CbgVDhgn/CEcSrxf2ZXtDdG5d0FmTpjCETf:Flg/kSrxQX9dG5dwW5
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\10901268\10901268\DeSmuME_VS2008_NoConsole.exe"C:\Users\Admin\AppData\Local\Temp\10901268\10901268\DeSmuME_VS2008_NoConsole.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x5041⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB