Overview
overview
10Static
static
10Hex-Rays I...te.exe
windows10-2004-x64
1Hex-Rays I...64.exe
windows10-2004-x64
1Hex-Rays I...da.exe
windows10-2004-x64
1Hex-Rays I...64.exe
windows10-2004-x64
1Hex-Rays I...ch.exe
windows10-2004-x64
1Hex-Rays I...at.exe
windows10-2004-x64
1Hex-Rays I...64.exe
windows10-2004-x64
1Hex-Rays I...ph.exe
windows10-2004-x64
1Analysis
-
max time kernel
6s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
04-07-2023 22:18
Behavioral task
behavioral1
Sample
Hex-Rays IDA Professional Advanced Floating And Decompiler Full Activated/dbgsrv/win32_remote.exe
Resource
win10v2004-20230621-en
Behavioral task
behavioral2
Sample
Hex-Rays IDA Professional Advanced Floating And Decompiler Full Activated/dbgsrv/win64_remote64.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
Hex-Rays IDA Professional Advanced Floating And Decompiler Full Activated/ida.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral4
Sample
Hex-Rays IDA Professional Advanced Floating And Decompiler Full Activated/ida64.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
Hex-Rays IDA Professional Advanced Floating And Decompiler Full Activated/idapyswitch.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral6
Sample
Hex-Rays IDA Professional Advanced Floating And Decompiler Full Activated/idat.exe
Resource
win10v2004-20230621-en
Behavioral task
behavioral7
Sample
Hex-Rays IDA Professional Advanced Floating And Decompiler Full Activated/idat64.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral8
Sample
Hex-Rays IDA Professional Advanced Floating And Decompiler Full Activated/qwingraph.exe
Resource
win10v2004-20230703-en
General
-
Target
Hex-Rays IDA Professional Advanced Floating And Decompiler Full Activated/ida.exe
-
Size
4.0MB
-
MD5
feb31c52b751255b3bd42a245b850110
-
SHA1
b714ac4d8cc65d248f6be4a258be6b2e0386223b
-
SHA256
ca77b4cf8e18d7b153a424e5591d759d5bdce0a5d4b9f21441dce67c32707ced
-
SHA512
5aa93de0d3c0a97bc632b5ac5c9d0f05d62aacc2c4c825f840c6edc212361386a9b0914d7ad523ceb5e2d5db429c300297ff5111527e2d1780c75e57b6091ec7
-
SSDEEP
49152:69EJ6ZQOajI9/7MlHrbh/MG7y72fl1cDQK0czmoPgqXfUnpzjfwRwaw5ArwuJyNp:4Zt8HyG7g2fly9ljwCqDolZEKuSmD
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
Processes:
ida.exepid process 3396 ida.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
ida.exepid process 3396 ida.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
ida.exepid process 3396 ida.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Hex-Rays IDA Professional Advanced Floating And Decompiler Full Activated\ida.exe"C:\Users\Admin\AppData\Local\Temp\Hex-Rays IDA Professional Advanced Floating And Decompiler Full Activated\ida.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3396