Overview

overview

9

Static

static

Hyper Canv...SH.nfo

windows7-x64

1

Hyper Canv...SH.nfo

windows10-2004-x64

1

Hyper Canv...2O.nfo

windows7-x64

1

Hyper Canv...2O.nfo

windows10-2004-x64

1

Hyper Canv...up.exe

windows7-x64

9

Hyper Canv...up.exe

windows10-2004-x64

9

Hyper Canv...id.diz

windows7-x64

3

Hyper Canv...id.diz

windows10-2004-x64

3

Analysis

  • max time kernel
    81s
  • max time network
    44s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    01/02/2023, 19:43

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    Hyper Canvas v1.53 - Edirol/BLaCK+MuSH.nfo

  • Size

    4KB

  • MD5

    9b331987675552fb6b632f16468b8f88

  • SHA1

    ffd1409cac565b321812068e54e3e78eaa68c2b8

  • SHA256

    c0661fbc967722d46658cd9417167db3496a0351bc7871c2a5ffc3b74d0a8cb0

  • SHA512

    f3d3051accee19fdf4c5e1a09b81d2440f552dedc2f3d8a1e269e9a4f80b4f9d7cb7b625cd0abae95243a9ab58ee36e5bb3d931935c57e91c0e79f301c51beef

  • SSDEEP

    96:mZtByAMajizg5UoUMCN6TsSsKbW7SK0++adIXFbq0d:mtyA6g5OtwTixl52bb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Windows\system32\msinfo32.exe
    C:\Windows\system32\msinfo32.exe "C:\Users\Admin\AppData\Local\Temp\Hyper Canvas v1.53 - Edirol\BLaCK+MuSH.nfo"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:1476

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1476-54-0x000007FEFB5D1000-0x000007FEFB5D3000-memory.dmp

          Filesize

          8KB

          Download