Analysis

  • max time kernel
    148s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/09/2023, 17:37

General

  • Target

    Lossless.Scaling.v2.2.5/Lossless.Scaling.v2.2.5/LosslessScaling.exe

  • Size

    944KB

  • MD5

    5807a9485671acf472133d10f2e87f5a

  • SHA1

    b179ad129092a287258136e37396ef516e10aabb

  • SHA256

    ab3d823fdec09061cbd9916510d8a4bc389481642a94e7622ae01d0b4ae3bb21

  • SHA512

    665c970cfbe990f3903b55bc0c4aa556b2788281e25e2957d05ab67c3223c9b1ec3afb5a3dce7e794c4d78fe20ce8695aa51173871b74cd767ca2a039d1caabf

  • SSDEEP

    12288:8IfORfvHEDS4MCLSyf6mOuGyW38yHJc+CKtOaO5Z7WhaGwnzE4ZbuRCwmhI2J+0g:8lRfWtMCLPf1Oi32OvzTo4ZiRlT/B

Score
1/10

Malware Config

Signatures

  • Modifies Control Panel 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Lossless.Scaling.v2.2.5\Lossless.Scaling.v2.2.5\LosslessScaling.exe
    "C:\Users\Admin\AppData\Local\Temp\Lossless.Scaling.v2.2.5\Lossless.Scaling.v2.2.5\LosslessScaling.exe"
    1⤵
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:4640

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Lossless Scaling\Settings.xml

          Filesize

          2KB

          MD5

          50bb1f9fe80513b57f8ebcb7348ef42d

          SHA1

          511dd7926dd603c0a99db80cacc019777b48266d

          SHA256

          332e9efa5c32adc92538edd777b2def6f241c24833c4c7490e13928cc40dca5e

          SHA512

          6e654d344ed2020f131f3d86258e2d347b6cc1fa801fd96d0dcabec86ada244fec49658eb462e547bbb6ced0a028e48cac3a362d807321dc335039efd44d917f

        • memory/4640-10-0x000002074AB10000-0x000002074AB20000-memory.dmp

          Filesize

          64KB

        • memory/4640-11-0x0000020764EE0000-0x0000020764F18000-memory.dmp

          Filesize

          224KB

        • memory/4640-3-0x0000020764B30000-0x0000020764C16000-memory.dmp

          Filesize

          920KB

        • memory/4640-0-0x0000020748CA0000-0x0000020748D92000-memory.dmp

          Filesize

          968KB

        • memory/4640-5-0x00000207491C0000-0x00000207491C8000-memory.dmp

          Filesize

          32KB

        • memory/4640-6-0x00000207491F0000-0x00000207491FA000-memory.dmp

          Filesize

          40KB

        • memory/4640-7-0x000002074AB10000-0x000002074AB20000-memory.dmp

          Filesize

          64KB

        • memory/4640-8-0x0000020764DF0000-0x0000020764EA2000-memory.dmp

          Filesize

          712KB

        • memory/4640-2-0x000002074AB10000-0x000002074AB20000-memory.dmp

          Filesize

          64KB

        • memory/4640-9-0x0000020764F60000-0x000002076501A000-memory.dmp

          Filesize

          744KB

        • memory/4640-4-0x000002074AA70000-0x000002074AA96000-memory.dmp

          Filesize

          152KB

        • memory/4640-12-0x0000020767C80000-0x0000020767C88000-memory.dmp

          Filesize

          32KB

        • memory/4640-14-0x0000020767CA0000-0x0000020767CAE000-memory.dmp

          Filesize

          56KB

        • memory/4640-1-0x00007FFBF6700000-0x00007FFBF71C1000-memory.dmp

          Filesize

          10.8MB

        • memory/4640-24-0x00007FFBF6700000-0x00007FFBF71C1000-memory.dmp

          Filesize

          10.8MB

        • memory/4640-25-0x000002074AB10000-0x000002074AB20000-memory.dmp

          Filesize

          64KB

        • memory/4640-26-0x000002074AB10000-0x000002074AB20000-memory.dmp

          Filesize

          64KB

        • memory/4640-27-0x000002074AB10000-0x000002074AB20000-memory.dmp

          Filesize

          64KB

        • memory/4640-28-0x000002074AB10000-0x000002074AB20000-memory.dmp

          Filesize

          64KB