Resubmissions

19-10-2023 11:09

231019-m9hf6agh68 10

Analysis

  • max time kernel
    600s
  • max time network
    447s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-ja
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-jalocale:ja-jpos:windows10-2004-x64systemwindows
  • submitted
    19-10-2023 11:09

General

  • Target

    UserAssistView 1.0.2/UserAssistView.exe

  • Size

    30KB

  • MD5

    f36530f46a34516be38521ee9a134d28

  • SHA1

    47f0553e0a0febbef59fd9a32149497bbdd5229c

  • SHA256

    bc11c4150bbc6f8b2cf7bc96bedbb183c61d53ab8e4052b15d58bad6b6d1befa

  • SHA512

    5c1a1282ffc25409d0044770c80e92f7a89fb40567dbb24f64f46750083bb30b842a63ef58b8b9433fa5a5903a5aa7bf71ee941709365c6bc17a9f4d85b1ad5d

  • SSDEEP

    384:IecsPHRggjhCnMgZas8+oAEqPm63AovtX625wWMPODVDSt/U/BEUxhUp5Erzrbqu:HhCWSrPlX62arODxS1U/Br9nrbqUo

Score
9/10
upx

Malware Config

Signatures

  • Nirsoft 1 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\UserAssistView 1.0.2\UserAssistView.exe
    "C:\Users\Admin\AppData\Local\Temp\UserAssistView 1.0.2\UserAssistView.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:4904

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4904-0-0x0000000000400000-0x0000000000416000-memory.dmp

    Filesize

    88KB

  • memory/4904-1-0x0000000000400000-0x0000000000416000-memory.dmp

    Filesize

    88KB