Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
11/01/2024, 01:06
Static task
static1
Behavioral task
behavioral1
Sample
ClipList_1.0.0.0/ClipList.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ClipList_1.0.0.0/ClipList.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
ClipList_1.0.0.0/zip.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
ClipList_1.0.0.0/zip.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
ClipList_1.0.0.0/新云软件.url
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
ClipList_1.0.0.0/新云软件.url
Resource
win10v2004-20231222-en
General
-
Target
ClipList_1.0.0.0/ClipList.exe
-
Size
424KB
-
MD5
ed30e5260234176b254a921253e22495
-
SHA1
b187b09d7128d2bea0a158f455adfef712c77ca3
-
SHA256
6b5d65f03f8e5bb2448d87001d1e09c8e72b5489cf121dd7e551a9ff8f2a9447
-
SHA512
025b124ffe56a49e611d4aef878256f99b896e163d1e076c61aaccf520e6f16c68430acccdc9d646687735b8afff0b61bc0a2b5b2229708b7c62b1787b043c20
-
SSDEEP
12288:SQgYQLRfhOzEDaFQMAyPpDo5RjM3ILQP4YkvxHTqA:92hCEuFQZyPNo3jb+4Ykvd
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2228 ClipList.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2228 ClipList.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 2228 ClipList.exe