Analysis

  • max time kernel
    251s
  • max time network
    274s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    12/10/2023, 08:39

General

  • Target

    bd1664f48e462c18fc9e65b2894cecfb93db5b7e74893849a12d1b8e11beb1ae.exe

  • Size

    15.3MB

  • MD5

    cc1c0d09cab2c3c5ff3a57e3ee344930

  • SHA1

    4544aec149d4c2a755feef2a37c1e758b685a718

  • SHA256

    bd1664f48e462c18fc9e65b2894cecfb93db5b7e74893849a12d1b8e11beb1ae

  • SHA512

    dfd9f22c4a680e16fee9e1c203db08d8a7989701f7aa872a83c203e613be16bd26c09ab8bcbacc15398d77f8bdd67e1205d165613d681c895bf4aab1f91cd0f4

  • SSDEEP

    196608:2Zr/dDFKrIZwEiCDsBTm/Aa/+5b5Zx14:ur/dDFK3EitBmYb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bd1664f48e462c18fc9e65b2894cecfb93db5b7e74893849a12d1b8e11beb1ae.exe
    "C:\Users\Admin\AppData\Local\Temp\bd1664f48e462c18fc9e65b2894cecfb93db5b7e74893849a12d1b8e11beb1ae.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2616

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2616-0-0x0000000000400000-0x00000000013D5000-memory.dmp

    Filesize

    15.8MB

  • memory/2616-1-0x0000000000120000-0x0000000000121000-memory.dmp

    Filesize

    4KB

  • memory/2616-2-0x0000000006220000-0x0000000006221000-memory.dmp

    Filesize

    4KB

  • memory/2616-4-0x0000000006250000-0x0000000006251000-memory.dmp

    Filesize

    4KB

  • memory/2616-3-0x0000000000400000-0x00000000013D5000-memory.dmp

    Filesize

    15.8MB

  • memory/2616-5-0x0000000000400000-0x00000000013D5000-memory.dmp

    Filesize

    15.8MB

  • memory/2616-6-0x0000000000120000-0x0000000000121000-memory.dmp

    Filesize

    4KB

  • memory/2616-7-0x0000000006220000-0x0000000006221000-memory.dmp

    Filesize

    4KB

  • memory/2616-8-0x0000000000400000-0x00000000013D5000-memory.dmp

    Filesize

    15.8MB

  • memory/2616-9-0x0000000000400000-0x00000000013D5000-memory.dmp

    Filesize

    15.8MB

  • memory/2616-10-0x0000000000400000-0x00000000013D5000-memory.dmp

    Filesize

    15.8MB

  • memory/2616-11-0x0000000000400000-0x00000000013D5000-memory.dmp

    Filesize

    15.8MB

  • memory/2616-12-0x0000000000400000-0x00000000013D5000-memory.dmp

    Filesize

    15.8MB

  • memory/2616-13-0x0000000000400000-0x00000000013D5000-memory.dmp

    Filesize

    15.8MB

  • memory/2616-14-0x0000000000400000-0x00000000013D5000-memory.dmp

    Filesize

    15.8MB

  • memory/2616-15-0x0000000000400000-0x00000000013D5000-memory.dmp

    Filesize

    15.8MB

  • memory/2616-16-0x0000000000400000-0x00000000013D5000-memory.dmp

    Filesize

    15.8MB

  • memory/2616-17-0x0000000000400000-0x00000000013D5000-memory.dmp

    Filesize

    15.8MB

  • memory/2616-18-0x0000000000400000-0x00000000013D5000-memory.dmp

    Filesize

    15.8MB

  • memory/2616-19-0x0000000000400000-0x00000000013D5000-memory.dmp

    Filesize

    15.8MB

  • memory/2616-20-0x0000000000400000-0x00000000013D5000-memory.dmp

    Filesize

    15.8MB