Overview
overview
10Static
static
10IDA Pro 8....re.dll
windows10-2004-x64
1IDA Pro 8....ui.dll
windows10-2004-x64
1IDA Pro 8....rt.dll
windows10-2004-x64
1IDA Pro 8....vg.dll
windows10-2004-x64
1IDA Pro 8....ts.dll
windows10-2004-x64
1IDA Pro 8....ch.vbs
windows10-2004-x64
1IDA Pro 8....64.dll
windows10-2004-x64
1IDA Pro 8....server
windows10-2004-x64
1IDA Pro 8....rver64
windows10-2004-x64
1IDA Pro 8....server
windows10-2004-x64
1IDA Pro 8....server
windows10-2004-x64
1IDA Pro 8....server
windows10-2004-x64
1IDA Pro 8....server
windows10-2004-x64
1IDA Pro 8....rver64
windows10-2004-x64
1IDA Pro 8....server
windows10-2004-x64
1IDA Pro 8....rver64
windows10-2004-x64
1IDA Pro 8...._arm64
windows10-2004-x64
1IDA Pro 8....arm64e
windows10-2004-x64
1IDA Pro 8....te.exe
windows10-2004-x64
1IDA Pro 8....64.exe
windows10-2004-x64
1IDA Pro 8....da.dll
windows10-2004-x64
1IDA Pro 8....da.exe
windows10-2004-x64
1IDA Pro 8....ida.js
windows10-2004-x64
1IDA Pro 8....64.dll
windows10-2004-x64
1IDA Pro 8....64.exe
windows10-2004-x64
1IDA Pro 8....lp.chm
windows10-2004-x64
1IDA Pro 8....ch.exe
windows10-2004-x64
1IDA Pro 8....at.exe
windows10-2004-x64
1IDA Pro 8....64.exe
windows10-2004-x64
1IDA Pro 8....ida.js
windows10-2004-x64
1IDA Pro 8....e17.js
windows10-2004-x64
1IDA Pro 8....mic.js
windows10-2004-x64
1Analysis
-
max time kernel
145s -
max time network
272s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
25-11-2023 11:14
Behavioral task
behavioral1
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86_ x86_64)/Qt5Core.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral2
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86_ x86_64)/Qt5Gui.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral3
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86_ x86_64)/Qt5PrintSupport.dll
Resource
win10v2004-20231025-en
Behavioral task
behavioral4
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86_ x86_64)/Qt5Svg.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral5
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86_ x86_64)/Qt5Widgets.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral6
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/cfg/gdb_arch.vbs
Resource
win10v2004-20231023-en
Behavioral task
behavioral7
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86_ x86_64)/clp64.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral8
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/dbgsrv/android_server
Resource
win10v2004-20231020-en
Behavioral task
behavioral9
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/dbgsrv/android_server64
Resource
win10v2004-20231023-en
Behavioral task
behavioral10
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/dbgsrv/android_x64_server
Resource
win10v2004-20231023-en
Behavioral task
behavioral11
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/dbgsrv/android_x86_server
Resource
win10v2004-20231020-en
Behavioral task
behavioral12
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/dbgsrv/armlinux_server
Resource
win10v2004-20231020-en
Behavioral task
behavioral13
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/dbgsrv/linux_server
Resource
win10v2004-20231025-en
Behavioral task
behavioral14
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/dbgsrv/linux_server64
Resource
win10v2004-20231023-en
Behavioral task
behavioral15
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/dbgsrv/mac_server
Resource
win10v2004-20231023-en
Behavioral task
behavioral16
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/dbgsrv/mac_server64
Resource
win10v2004-20231023-en
Behavioral task
behavioral17
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/dbgsrv/mac_server_arm64
Resource
win10v2004-20231020-en
Behavioral task
behavioral18
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/dbgsrv/mac_server_arm64e
Resource
win10v2004-20231023-en
Behavioral task
behavioral19
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/dbgsrv/win32_remote.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral20
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/dbgsrv/win64_remote64.exe
Resource
win10v2004-20231025-en
Behavioral task
behavioral21
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86_ x86_64)/ida.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral22
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/ida.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral23
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/ida.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral24
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86_ x86_64)/ida64.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral25
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/ida64.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral26
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/idahelp.chm
Resource
win10v2004-20231020-en
Behavioral task
behavioral27
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/idapyswitch.exe
Resource
win10v2004-20231025-en
Behavioral task
behavioral28
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/idat.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral29
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/idat64.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral30
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/idc/ida.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral31
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/plugins/hexrays_sdk/plugins/vds17/hexrays_sample17.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral32
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/plugins/hexrays_sdk/verifier/showmic.js
Resource
win10v2004-20231020-en
General
-
Target
IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/ida64.exe
-
Size
4.0MB
-
MD5
23fe02467fb05b85cc78bcaaf1b015da
-
SHA1
79399bce20c07e0845197f4b5ef3d2a2d780ef6a
-
SHA256
c695b8de0b3cb3b152890625ec3e0495bad2cd1b257c89de3169b35e3d67b44c
-
SHA512
cb38da2a0366c73ddcac2a7024d302b80ecb36e5d4dea4a161e468e989e94b8db31cef8326a6a4837a7e3ff59808bd90829311431007aa93b5a521490a1b1c63
-
SSDEEP
49152:3JSx9rKN/uUVPb4QpuLuv9C1nq7IqqvAkuvnb6wPxLIfFvnP9bCxK/kLC/XIB9C:3Qx9asSFClEZlT5a8LaIBAazGXMZ8G
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
Processes:
ida64.exepid process 1300 ida64.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
ida64.exepid process 1300 ida64.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
ida64.exepid process 1300 ida64.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\IDA Pro 8.3\IDA Pro 8.3 (x86, x86_64)\ida64.exe"C:\Users\Admin\AppData\Local\Temp\IDA Pro 8.3\IDA Pro 8.3 (x86, x86_64)\ida64.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1300