Analysis
-
max time kernel
1852s -
max time network
1819s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
11-02-2024 20:36
General
-
Target
audacity-win-3.4.2-32bit.exe
-
Size
13.8MB
-
MD5
79770d516b49a5839bbf4032c34a7bbc
-
SHA1
fed439037e5f1440dd371d0ca1fff6bcb632817f
-
SHA256
7f7dd6f96643a1a826d1c91a5217721f97474f171a6335c47d4c50a76c7aceaa
-
SHA512
ac0c8e3c6e5821ec374e7b79136ee9cc83f7135bcd2934eb3d83c7d69204ac12e3b0b821bcf60412c22a2d611658df21e2676a00cbc438a28ba98122e2ae8447
-
SSDEEP
393216:+HsVDWKyG7RRBw038vArRsZFZXP5eoawm+I:yAyQTw03jCZFZfTaaI
Score
4/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\audacity-win-3.4.2-32bit.exe"C:\Users\Admin\AppData\Local\Temp\audacity-win-3.4.2-32bit.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-S5G7J.tmp\audacity-win-3.4.2-32bit.tmp"C:\Users\Admin\AppData\Local\Temp\is-S5G7J.tmp\audacity-win-3.4.2-32bit.tmp" /SL5="$7011E,13325830,956416,C:\Users\Admin\AppData\Local\Temp\audacity-win-3.4.2-32bit.exe"2⤵
- Executes dropped EXE
- Suspicious behavior: GetForegroundWindowSpam
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.2MB
MD55c394505f708326cd033cbf5faab4c6a
SHA1d36ab330ce80ae47ac248f7518ef3982ee8dd015
SHA256d9919e23f721bd4038f3bcc481584980b1392e60e5b2362ad87cb6611d409b80
SHA51259172a4993cceaf71be390391f211d4178879a8ab6d7e1731d4b3f105e2a5f41d35038ebb9615bd439faae1be08b4949f136b93e2287ba8c01555195ec02ec48
-
Filesize
4KB
-
Filesize
3.2MB
-
Filesize
4KB
-
Filesize
988KB
-
Filesize
988KB