Analysis

  • max time kernel
    151s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/05/2023, 21:11

General

  • Target

    devcpp.exe

  • Size

    9.3MB

  • MD5

    c89d32dae41943e736b2a546ef46256f

  • SHA1

    c6914e0067a9893ca29df7ecc9b157edd138c998

  • SHA256

    2ae96f22bdaf684466f91ea4aec184feb166e41c992ea6fa0a937e4d8886eff8

  • SHA512

    86bf9b36d7c2c774345c0e9ec9029388e2affe4ad629588ff20e16d2b3f7782fc267de21869edbbae9d87b99facf6031d7607dce2d0a51e253b80ced0bdfb93e

  • SSDEEP

    196608:hIdApZnT/l4pdoMA7wYB5qnDnqFljJmTgBSI:hIipr4pdLM/MDnSldm0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\devcpp.exe
    "C:\Users\Admin\AppData\Local\Temp\devcpp.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1400

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Embarcadero\Dev-Cpp\codeinsertion.ini

          Filesize

          2KB

          MD5

          cf53edcba4a6a3b5e96a245586fb8d74

          SHA1

          f1f434225b5d3b7013f2f47d195ec4ef94ad0e2f

          SHA256

          6279114367382f78028ee506ad784ecbcd00f97e3985acaeea8bf6a775911770

          SHA512

          f7775aed956da51c68542120397d7b040e4622695374d1844351d2b49b467c2e417061e67d8427f4ee9522100b17a769d74804d4a7f270738dabc53644f88aa9

        • C:\Users\Admin\AppData\Roaming\Embarcadero\Dev-Cpp\codeinsertion.ini

          Filesize

          2KB

          MD5

          cf53edcba4a6a3b5e96a245586fb8d74

          SHA1

          f1f434225b5d3b7013f2f47d195ec4ef94ad0e2f

          SHA256

          6279114367382f78028ee506ad784ecbcd00f97e3985acaeea8bf6a775911770

          SHA512

          f7775aed956da51c68542120397d7b040e4622695374d1844351d2b49b467c2e417061e67d8427f4ee9522100b17a769d74804d4a7f270738dabc53644f88aa9

        • C:\Users\Admin\AppData\Roaming\Embarcadero\Dev-Cpp\devcpp.ini

          Filesize

          28B

          MD5

          7a02f98172f7eae443787da22b55bc5f

          SHA1

          c33fe59dd4c2a1d89990a8f4b1cbdf5e4c7ca3f8

          SHA256

          44e7e2190fbd400404fc044f8d646c78c364b83026dd5dc32ee0dc0504fe8702

          SHA512

          2c19dbc146f4ad2febafb9aa29fa10213f86c3cd371895d83c21bd75caa2108a0dcd4067ac825bf7f2c33b619d6955b7758bdcbbc5cfc344894f3abfe98ec383

        • memory/1400-133-0x00000000017A0000-0x00000000017A1000-memory.dmp

          Filesize

          4KB

        • memory/1400-135-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-134-0x00000000051F0000-0x00000000051F1000-memory.dmp

          Filesize

          4KB

        • memory/1400-136-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-137-0x0000000005200000-0x0000000005201000-memory.dmp

          Filesize

          4KB

        • memory/1400-138-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-139-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-140-0x0000000005210000-0x0000000005211000-memory.dmp

          Filesize

          4KB

        • memory/1400-141-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-142-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-143-0x0000000005220000-0x0000000005221000-memory.dmp

          Filesize

          4KB

        • memory/1400-144-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-145-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-146-0x0000000005230000-0x0000000005231000-memory.dmp

          Filesize

          4KB

        • memory/1400-147-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-148-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-149-0x0000000005240000-0x0000000005241000-memory.dmp

          Filesize

          4KB

        • memory/1400-150-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-151-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-153-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-154-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-155-0x0000000006080000-0x0000000006081000-memory.dmp

          Filesize

          4KB

        • memory/1400-156-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-157-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-158-0x0000000006090000-0x0000000006091000-memory.dmp

          Filesize

          4KB

        • memory/1400-159-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-160-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-161-0x00000000060A0000-0x00000000060A1000-memory.dmp

          Filesize

          4KB

        • memory/1400-162-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-163-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-152-0x0000000005250000-0x0000000005251000-memory.dmp

          Filesize

          4KB

        • memory/1400-164-0x00000000060B0000-0x00000000060B1000-memory.dmp

          Filesize

          4KB

        • memory/1400-166-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-165-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-167-0x00000000060C0000-0x00000000060C1000-memory.dmp

          Filesize

          4KB

        • memory/1400-168-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-169-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-170-0x00000000061D0000-0x00000000061D1000-memory.dmp

          Filesize

          4KB

        • memory/1400-171-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-172-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-174-0x00000000061E0000-0x00000000061E1000-memory.dmp

          Filesize

          4KB

        • memory/1400-175-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-176-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-177-0x00000000061F0000-0x00000000061F1000-memory.dmp

          Filesize

          4KB

        • memory/1400-173-0x0000000000100000-0x0000000000A79000-memory.dmp

          Filesize

          9.5MB

        • memory/1400-178-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-179-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-180-0x0000000006200000-0x0000000006201000-memory.dmp

          Filesize

          4KB

        • memory/1400-181-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-182-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-183-0x0000000006210000-0x0000000006211000-memory.dmp

          Filesize

          4KB

        • memory/1400-184-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-185-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-186-0x0000000006220000-0x0000000006221000-memory.dmp

          Filesize

          4KB

        • memory/1400-187-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-188-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-189-0x0000000006230000-0x0000000006231000-memory.dmp

          Filesize

          4KB

        • memory/1400-190-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-191-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-192-0x0000000006240000-0x0000000006241000-memory.dmp

          Filesize

          4KB

        • memory/1400-193-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-194-0x0000000004C80000-0x0000000004F80000-memory.dmp

          Filesize

          3.0MB

        • memory/1400-201-0x00000000017A0000-0x00000000017A1000-memory.dmp

          Filesize

          4KB

        • memory/1400-248-0x0000000000100000-0x0000000000A79000-memory.dmp

          Filesize

          9.5MB

        • memory/1400-249-0x0000000000100000-0x0000000000A79000-memory.dmp

          Filesize

          9.5MB