Overview
overview
10Static
static
10IDA Pro 7....28.cfg
windows7-x64
3IDA Pro 7....28.cfg
windows10-2004-x64
3IDA Pro 7....da.dll
windows7-x64
1IDA Pro 7....da.dll
windows10-2004-x64
1IDA Pro 7....da.exe
windows7-x64
1IDA Pro 7....da.exe
windows10-2004-x64
1IDA Pro 7....ida.js
windows7-x64
1IDA Pro 7....ida.js
windows10-2004-x64
1IDA Pro 7....db.dll
windows7-x64
1IDA Pro 7....db.dll
windows10-2004-x64
1IDA Pro 7....64.dll
windows7-x64
1IDA Pro 7....64.dll
windows10-2004-x64
1IDA Pro 7....er.dll
windows7-x64
1IDA Pro 7....er.dll
windows10-2004-x64
1IDA Pro 7....64.dll
windows7-x64
1IDA Pro 7....64.dll
windows10-2004-x64
1IDA Pro 7....er.dll
windows7-x64
1IDA Pro 7....er.dll
windows10-2004-x64
1IDA Pro 7....gs.dll
windows7-x64
1IDA Pro 7....gs.dll
windows10-2004-x64
1IDA Pro 7....64.dll
windows7-x64
1IDA Pro 7....64.dll
windows10-2004-x64
1IDA Pro 7....le.dll
windows7-x64
1IDA Pro 7....le.dll
windows10-2004-x64
1IDA Pro 7....rt.dll
windows7-x64
1IDA Pro 7....rt.dll
windows10-2004-x64
1IDA Pro 7....64.dll
windows7-x64
1IDA Pro 7....64.dll
windows10-2004-x64
1IDA Pro 7....ds.dll
windows7-x64
1IDA Pro 7....ds.dll
windows10-2004-x64
1IDA Pro 7....64.dll
windows7-x64
1IDA Pro 7....64.dll
windows10-2004-x64
1Analysis
-
max time kernel
282s -
max time network
349s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
18-01-2024 20:14
Behavioral task
behavioral1
Sample
IDA Pro 7.7.220118 (Windows) (x86,x64,ARM64)/cfg/tms32028.cfg
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
IDA Pro 7.7.220118 (Windows) (x86,x64,ARM64)/cfg/tms32028.cfg
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
IDA Pro 7.7.220118 (Windows) (x86_x64_ARM64)/ida.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
IDA Pro 7.7.220118 (Windows) (x86_x64_ARM64)/ida.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
IDA Pro 7.7.220118 (Windows) (x86,x64,ARM64)/ida.exe
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
IDA Pro 7.7.220118 (Windows) (x86,x64,ARM64)/ida.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral7
Sample
IDA Pro 7.7.220118 (Windows) (x86,x64,ARM64)/ida.js
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
IDA Pro 7.7.220118 (Windows) (x86,x64,ARM64)/ida.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
IDA Pro 7.7.220118 (Windows) (x86_x64_ARM64)/plugins/pdb.dll
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
IDA Pro 7.7.220118 (Windows) (x86_x64_ARM64)/plugins/pdb.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
IDA Pro 7.7.220118 (Windows) (x86_x64_ARM64)/plugins/pdb64.dll
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
IDA Pro 7.7.220118 (Windows) (x86_x64_ARM64)/plugins/pdb64.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
IDA Pro 7.7.220118 (Windows) (x86_x64_ARM64)/plugins/pin_user.dll
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
IDA Pro 7.7.220118 (Windows) (x86_x64_ARM64)/plugins/pin_user.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
IDA Pro 7.7.220118 (Windows) (x86_x64_ARM64)/plugins/pin_user64.dll
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
IDA Pro 7.7.220118 (Windows) (x86_x64_ARM64)/plugins/pin_user64.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
IDA Pro 7.7.220118 (Windows) (x86_x64_ARM64)/plugins/replay_user.dll
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
IDA Pro 7.7.220118 (Windows) (x86_x64_ARM64)/plugins/replay_user.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
IDA Pro 7.7.220118 (Windows) (x86_x64_ARM64)/plugins/strings.dll
Resource
win7-20231129-en
Behavioral task
behavioral20
Sample
IDA Pro 7.7.220118 (Windows) (x86_x64_ARM64)/plugins/strings.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
IDA Pro 7.7.220118 (Windows) (x86_x64_ARM64)/plugins/strings64.dll
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
IDA Pro 7.7.220118 (Windows) (x86_x64_ARM64)/plugins/strings64.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral23
Sample
IDA Pro 7.7.220118 (Windows) (x86_x64_ARM64)/plugins/styles/qwindowsvistastyle.dll
Resource
win7-20231129-en
Behavioral task
behavioral24
Sample
IDA Pro 7.7.220118 (Windows) (x86_x64_ARM64)/plugins/styles/qwindowsvistastyle.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral25
Sample
IDA Pro 7.7.220118 (Windows) (x86_x64_ARM64)/plugins/svdimport.dll
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
IDA Pro 7.7.220118 (Windows) (x86_x64_ARM64)/plugins/svdimport.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
IDA Pro 7.7.220118 (Windows) (x86_x64_ARM64)/plugins/swift64.dll
Resource
win7-20231129-en
Behavioral task
behavioral28
Sample
IDA Pro 7.7.220118 (Windows) (x86_x64_ARM64)/plugins/swift64.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
IDA Pro 7.7.220118 (Windows) (x86_x64_ARM64)/plugins/tds.dll
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
IDA Pro 7.7.220118 (Windows) (x86_x64_ARM64)/plugins/tds.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral31
Sample
IDA Pro 7.7.220118 (Windows) (x86_x64_ARM64)/plugins/tds64.dll
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
IDA Pro 7.7.220118 (Windows) (x86_x64_ARM64)/plugins/tds64.dll
Resource
win10v2004-20231215-en
General
-
Target
IDA Pro 7.7.220118 (Windows) (x86,x64,ARM64)/ida.exe
-
Size
4.0MB
-
MD5
9d6d3e344709427ab731813f88a739e1
-
SHA1
407f520ea5dbf4480fa331b72183b40c3ae76766
-
SHA256
016b7a713b52b20123ac3100ab0347daa2e6def4249dc6c5490f1ec2954ed4cc
-
SHA512
fb3d10e6745023d3a858e9dafb7701bf9c5cedacbfc5243a5ae885e7b5a2d3855a18c2565c7c35237e30f6479ca842ff3e9b68e964e03b7ea643100312548e43
-
SSDEEP
49152:p9EJ6ZQOajI9/7MlHrbh/MG7y72fl1cDQK0czmoPgqXfUnpzjfwRwaw5ArwuJyNa:RZt8HyG7g2fly9ljwCqDolZEKu1mD
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
Processes:
ida.exepid process 2316 ida.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
ida.exepid process 2316 ida.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
ida.exepid process 2316 ida.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\IDA Pro 7.7.220118 (Windows) (x86,x64,ARM64)\ida.exe"C:\Users\Admin\AppData\Local\Temp\IDA Pro 7.7.220118 (Windows) (x86,x64,ARM64)\ida.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2316