Analysis
-
max time kernel
71s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20231215-de -
resource tags
-
submitted
18-01-2024 20:17
General
-
Target
IDA Pro/ida.exe
-
Size
4.0MB
-
MD5
9d6d3e344709427ab731813f88a739e1
-
SHA1
407f520ea5dbf4480fa331b72183b40c3ae76766
-
SHA256
016b7a713b52b20123ac3100ab0347daa2e6def4249dc6c5490f1ec2954ed4cc
-
SHA512
fb3d10e6745023d3a858e9dafb7701bf9c5cedacbfc5243a5ae885e7b5a2d3855a18c2565c7c35237e30f6479ca842ff3e9b68e964e03b7ea643100312548e43
-
SSDEEP
49152:p9EJ6ZQOajI9/7MlHrbh/MG7y72fl1cDQK0czmoPgqXfUnpzjfwRwaw5ArwuJyNa:RZt8HyG7g2fly9ljwCqDolZEKu1mD
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\IDA Pro\ida.exe"C:\Users\Admin\AppData\Local\Temp\IDA Pro\ida.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
-
C:\Windows\explorer.exe"C:\Windows\explorer.exe"1⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD5c4d1ccd6d1ed0276b6b3529441acc387
SHA13f8f1ec2600be3c051f8fdb0502b936bfaa945fd
SHA25649a4367f6db737ceecd36e3a2721dba22bbd806d39720d92e44c2413af80b3f1
SHA512b1372c47fafcb583bcfe178ff0b9cf66b774e0164975d1bfdbad243e1edfb704cfd1c7372adef21979561683450adb6d37ad60aa925d0a4a8f6168addb81fc95
-
Filesize
5.3MB
-
Filesize
4.0MB
-
Filesize
64KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
64KB
-
Filesize
40KB
-
Filesize
40KB