Analysis
-
max time kernel
1739s -
max time network
1514s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
25/12/2022, 14:34
General
-
Target
die_win64_portable_3.06.zip
-
Size
18.6MB
-
MD5
84982b2404120c6bcfdaffe509ec2228
-
SHA1
d8e0bb278468e3b85e8c52a2dbece624a5c1fd7f
-
SHA256
f1f075145a7b5ee8556dbf8a66c4e64e6b7eff71bcfeaed669f8f8471862fac9
-
SHA512
67e887b1feba5ec85654d8c8af7aa4da06ab00da26968c2eae5792e6dc7a942c7a1741f35ec762f877f4edd0b36f06238c8c5e4652ea8209a7cd0a718c4e0289
-
SSDEEP
393216:omvD0477yCz9V3w4NY4aG8Mzu+UEq9Ee7BjHvOtMlLc9llIhMv:8477ym9ZTaLvvZFLG0+v
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
-
Suspicious use of SetWindowsHookEx 6 IoCs
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\die_win64_portable_3.06.zip1⤵
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
-
C:\Users\Admin\Documents\die_win64_portable_3.06\die.exe"C:\Users\Admin\Documents\die_win64_portable_3.06\die.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
C:\Users\Admin\Documents\die_win64_portable_3.06\diec.exe"C:\Users\Admin\Documents\die_win64_portable_3.06\diec.exe"1⤵
-
C:\Users\Admin\Documents\die_win64_portable_3.06\diel.exe"C:\Users\Admin\Documents\die_win64_portable_3.06\diel.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
11.0MB
-
Filesize
5.3MB
-
Filesize
564KB
-
Filesize
564KB
-
Filesize
5.3MB
-
Filesize
64KB