Overview
overview
10Static
static
10IDA Pro/db...te.exe
windows7-x64
1IDA Pro/db...te.exe
windows10-2004-x64
1IDA Pro/db...64.exe
windows7-x64
1IDA Pro/db...64.exe
windows10-2004-x64
1IDA Pro/ida.dll
windows7-x64
1IDA Pro/ida.dll
windows10-2004-x64
1IDA Pro/ida.exe
windows7-x64
3IDA Pro/ida.exe
windows10-2004-x64
1IDA Pro/ida64.dll
windows7-x64
1IDA Pro/ida64.dll
windows10-2004-x64
1IDA Pro/ida64.exe
windows7-x64
1IDA Pro/ida64.exe
windows10-2004-x64
1IDA Pro/idat.exe
windows7-x64
1IDA Pro/idat.exe
windows10-2004-x64
1IDA Pro/idat64.exe
windows7-x64
1IDA Pro/idat64.exe
windows10-2004-x64
1IDA Pro/pl...ck.dll
windows7-x64
1IDA Pro/pl...ck.dll
windows10-2004-x64
1IDA Pro/pl...64.dll
windows7-x64
1IDA Pro/pl...64.dll
windows10-2004-x64
1IDA Pro/pl...np.dll
windows7-x64
1IDA Pro/pl...np.dll
windows10-2004-x64
1IDA Pro/pl...64.dll
windows7-x64
1IDA Pro/pl...64.dll
windows10-2004-x64
1IDA Pro/pl...ub.dll
windows7-x64
1IDA Pro/pl...ub.dll
windows10-2004-x64
1IDA Pro/pr...64.dll
windows7-x64
1IDA Pro/pr...64.dll
windows10-2004-x64
1IDA Pro/procs/arm.dll
windows7-x64
1IDA Pro/procs/arm.dll
windows10-2004-x64
1IDA Pro/pr...64.dll
windows7-x64
1IDA Pro/pr...64.dll
windows10-2004-x64
1Analysis
-
max time kernel
119s -
max time network
135s -
platform
windows7_x64 -
resource
win7-20231129-de -
resource tags
arch:x64arch:x86image:win7-20231129-delocale:de-deos:windows7-x64systemwindows -
submitted
18-01-2024 20:17
Behavioral task
behavioral1
Sample
IDA Pro/dbgsrv/win32_remote.exe
Resource
win7-20231215-de
Behavioral task
behavioral2
Sample
IDA Pro/dbgsrv/win32_remote.exe
Resource
win10v2004-20231215-de
Behavioral task
behavioral3
Sample
IDA Pro/dbgsrv/win64_remote64.exe
Resource
win7-20231215-de
Behavioral task
behavioral4
Sample
IDA Pro/dbgsrv/win64_remote64.exe
Resource
win10v2004-20231222-de
Behavioral task
behavioral5
Sample
IDA Pro/ida.dll
Resource
win7-20231215-de
Behavioral task
behavioral6
Sample
IDA Pro/ida.dll
Resource
win10v2004-20231215-de
Behavioral task
behavioral7
Sample
IDA Pro/ida.exe
Resource
win7-20231215-de
Behavioral task
behavioral8
Sample
IDA Pro/ida.exe
Resource
win10v2004-20231215-de
Behavioral task
behavioral9
Sample
IDA Pro/ida64.dll
Resource
win7-20231215-de
Behavioral task
behavioral10
Sample
IDA Pro/ida64.dll
Resource
win10v2004-20231215-de
Behavioral task
behavioral11
Sample
IDA Pro/ida64.exe
Resource
win7-20231129-de
Behavioral task
behavioral12
Sample
IDA Pro/ida64.exe
Resource
win10v2004-20231222-de
Behavioral task
behavioral13
Sample
IDA Pro/idat.exe
Resource
win7-20231215-de
Behavioral task
behavioral14
Sample
IDA Pro/idat.exe
Resource
win10v2004-20231222-de
Behavioral task
behavioral15
Sample
IDA Pro/idat64.exe
Resource
win7-20231215-de
Behavioral task
behavioral16
Sample
IDA Pro/idat64.exe
Resource
win10v2004-20231215-de
Behavioral task
behavioral17
Sample
IDA Pro/plugins/unpack.dll
Resource
win7-20231215-de
Behavioral task
behavioral18
Sample
IDA Pro/plugins/unpack.dll
Resource
win10v2004-20231222-de
Behavioral task
behavioral19
Sample
IDA Pro/plugins/unpack64.dll
Resource
win7-20231215-de
Behavioral task
behavioral20
Sample
IDA Pro/plugins/unpack64.dll
Resource
win10v2004-20231215-de
Behavioral task
behavioral21
Sample
IDA Pro/plugins/uunp.dll
Resource
win7-20231215-de
Behavioral task
behavioral22
Sample
IDA Pro/plugins/uunp.dll
Resource
win10v2004-20231222-de
Behavioral task
behavioral23
Sample
IDA Pro/plugins/uunp64.dll
Resource
win7-20231215-de
Behavioral task
behavioral24
Sample
IDA Pro/plugins/uunp64.dll
Resource
win10v2004-20231215-de
Behavioral task
behavioral25
Sample
IDA Pro/plugins/win32_stub.dll
Resource
win7-20231129-de
Behavioral task
behavioral26
Sample
IDA Pro/plugins/win32_stub.dll
Resource
win10v2004-20231215-de
Behavioral task
behavioral27
Sample
IDA Pro/procs/arc64.dll
Resource
win7-20231215-de
Behavioral task
behavioral28
Sample
IDA Pro/procs/arc64.dll
Resource
win10v2004-20231215-de
Behavioral task
behavioral29
Sample
IDA Pro/procs/arm.dll
Resource
win7-20231215-de
Behavioral task
behavioral30
Sample
IDA Pro/procs/arm.dll
Resource
win10v2004-20231215-de
Behavioral task
behavioral31
Sample
IDA Pro/procs/arm64.dll
Resource
win7-20231215-de
Behavioral task
behavioral32
Sample
IDA Pro/procs/arm64.dll
Resource
win10v2004-20231215-de
General
-
Target
IDA Pro/ida64.exe
-
Size
4.0MB
-
MD5
24ba0b4e0a3445a6c2fb866d94669f05
-
SHA1
3b6bf89f5ec4b19266260fd488ae720a90f1865d
-
SHA256
70840575ebddb25412f6de60329d5d395b325b709df9202411b723d0744c9624
-
SHA512
dcbd7babaa0de562a0a6682c3c0b053c419ddc2e78d6a0213c081a5ca50a256a720d0c6cbf3b2de669a5410918dfeb2d7d4fc29b23ae3285103c8e3c2be8b2b0
-
SSDEEP
49152:GQptxtn8v9flRURQXyczsoBR9RAzkdk9ltnv2UtxOpYjObpJWYcmD75zoELxnXAm:GitxMR4QuoBPRAzz9lRvMVtdwdZro6m
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
Processes:
ida64.exepid process 2200 ida64.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
ida64.exepid process 2200 ida64.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
ida64.exepid process 2200 ida64.exe