Analysis

  • max time kernel
    79s
  • max time network
    199s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-11-2023 11:14

General

  • Target

    IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/ida.exe

  • Size

    4.0MB

  • MD5

    05c7e465d9d88e94e064a99dc36f4ce1

  • SHA1

    e87ccd7bcfa05a30aa283c5e5953ba368ff75bed

  • SHA256

    d2650a12440bdc4f1b34456956221764c249060e808194b79152e9f679dd4e85

  • SHA512

    a9af650ea3518f88c5f8d9e1d059fd039c88d70b733ccec4107f75b14b6d9489a79dffa3ff5fbd7343ebeeb0ae90d26cdac64b79da006b5cb0c25316a66aacc4

  • SSDEEP

    49152:5MPnm/Zi34DKYj0ZkO4+XTcSq8EQtezdGfPko7FjOeBfDMmpwfFcnQOh6H6RBvV9:5smOqjcXA0nexReBv6avGBXMi+7Wg

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\IDA Pro 8.3\IDA Pro 8.3 (x86, x86_64)\ida.exe
    "C:\Users\Admin\AppData\Local\Temp\IDA Pro 8.3\IDA Pro 8.3 (x86, x86_64)\ida.exe"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3468

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3468-0-0x00007FF642C00000-0x00007FF643000000-memory.dmp

    Filesize

    4.0MB

  • memory/3468-1-0x00007FFD02AF0000-0x00007FFD03048000-memory.dmp

    Filesize

    5.3MB

  • memory/3468-2-0x0000020020BB0000-0x0000020020BC0000-memory.dmp

    Filesize

    64KB