Analysis

  • max time kernel
    131s
  • max time network
    36s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2023, 17:43

General

  • Target

    Project 64/Project64 1.6/Project64.exe

  • Size

    189KB

  • MD5

    be5961ce4de0b363069910edb897498b

  • SHA1

    ffed3dd42551d0e560eb2596defdd16547d8d5fa

  • SHA256

    8d7d373d024206f7513721b320ef3359b885aa6ea73dc2c14b3a42f0c099be2b

  • SHA512

    a4c73543926b68922c86000ed3b966acba53fb25521cf473d3f5f98b4bb416dc9ba50224406764d3bf890c9fbd9394cb1a5c9d4eb88d7fbff3869c73f7b2013d

  • SSDEEP

    3072:FBOJuioQ6eBMVgaXm2Av6zPrlVVybKxsnvXozMjBgWl0Yr:F8JuioTeygaXmDIrlVVX2vWMhv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Project 64\Project64 1.6\Project64.exe
    "C:\Users\Admin\AppData\Local\Temp\Project 64\Project64 1.6\Project64.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1496
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x464
    1⤵
      PID:1160

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1496-54-0x0000000000400000-0x0000000000554000-memory.dmp

      Filesize

      1.3MB

    • memory/1496-55-0x0000000002030000-0x0000000002135000-memory.dmp

      Filesize

      1.0MB

    • memory/1496-56-0x00000000003B0000-0x00000000003B9000-memory.dmp

      Filesize

      36KB

    • memory/1496-57-0x0000000010000000-0x00000000100A0000-memory.dmp

      Filesize

      640KB

    • memory/1496-58-0x00000000003D0000-0x00000000003F1000-memory.dmp

      Filesize

      132KB

    • memory/1496-59-0x0000000000400000-0x0000000000554000-memory.dmp

      Filesize

      1.3MB

    • memory/1496-60-0x0000000010000000-0x00000000100A0000-memory.dmp

      Filesize

      640KB

    • memory/1496-61-0x00000000048F0000-0x0000000004962000-memory.dmp

      Filesize

      456KB

    • memory/1496-62-0x0000000002E80000-0x0000000002EA5000-memory.dmp

      Filesize

      148KB

    • memory/1496-63-0x0000000004970000-0x00000000049A9000-memory.dmp

      Filesize

      228KB

    • memory/1496-64-0x0000000004EA0000-0x0000000004ED6000-memory.dmp

      Filesize

      216KB

    • memory/1496-65-0x0000000005740000-0x0000000005765000-memory.dmp

      Filesize

      148KB

    • memory/1496-66-0x0000000004B00000-0x0000000004B09000-memory.dmp

      Filesize

      36KB

    • memory/1496-67-0x0000000005EE0000-0x0000000005FC7000-memory.dmp

      Filesize

      924KB

    • memory/1496-68-0x0000000005790000-0x000000000579B000-memory.dmp

      Filesize

      44KB

    • memory/1496-69-0x00000000057B0000-0x00000000057E0000-memory.dmp

      Filesize

      192KB

    • memory/1496-70-0x0000000005790000-0x00000000057A0000-memory.dmp

      Filesize

      64KB

    • memory/1496-71-0x0000000004850000-0x00000000048EA000-memory.dmp

      Filesize

      616KB

    • memory/1496-72-0x00000000056B0000-0x00000000056F7000-memory.dmp

      Filesize

      284KB

    • memory/1496-73-0x0000000005720000-0x0000000005740000-memory.dmp

      Filesize

      128KB

    • memory/1496-74-0x0000000005E00000-0x0000000005ECF000-memory.dmp

      Filesize

      828KB

    • memory/1496-75-0x0000000005790000-0x00000000057AF000-memory.dmp

      Filesize

      124KB

    • memory/1496-76-0x0000000000400000-0x0000000000554000-memory.dmp

      Filesize

      1.3MB

    • memory/1496-81-0x0000000000400000-0x0000000000554000-memory.dmp

      Filesize

      1.3MB