Analysis

  • max time kernel
    50s
  • max time network
    26s
  • platform
    windows10-1703_x64
  • resource
    win10-20240214-en
  • resource tags

    arch:x64arch:x86image:win10-20240214-enlocale:en-usos:windows10-1703-x64system
  • submitted
    20/02/2024, 16:44

General

  • Target

    Editor.exe

  • Size

    1.4MB

  • MD5

    25f1266a44e621702190a8edbb52dc8e

  • SHA1

    d33fd63379ad05e00822eb3e02e0524cb2837715

  • SHA256

    69354ef5071cab321430fd0cb2c3724f126ca45613af6b84056da1399119cb50

  • SHA512

    42672c287bc48244971baeeffb410d6643a0b038f10ec4f112438a30059f9527935cc7146488ba59d41cab8de51b85063caa8ee7c8fb3fe4ee604935cca7754a

  • SSDEEP

    24576:R0H8j9Y/kjQQsJ+p9VkryvE9MF7GiZEcpkeH6wW3v7Z3aj:GgE8vswV1vE9MFxpkeVIZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Editor.exe
    "C:\Users\Admin\AppData\Local\Temp\Editor.exe"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1612
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x418
    1⤵
      PID:1496

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1612-0-0x00007FFDB3920000-0x00007FFDB3E57000-memory.dmp

      Filesize

      5.2MB

    • memory/1612-1-0x00007FF7F7520000-0x00007FF7F7693000-memory.dmp

      Filesize

      1.4MB

    • memory/1612-2-0x00000244C4D20000-0x00000244C4D30000-memory.dmp

      Filesize

      64KB

    • memory/1612-3-0x0000000061D60000-0x0000000061F16000-memory.dmp

      Filesize

      1.7MB

    • memory/1612-4-0x0000000063740000-0x000000006398F000-memory.dmp

      Filesize

      2.3MB