Analysis
-
max time kernel
141s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
06-03-2024 09:50
General
-
Target
ML-Sound-Lab-Amped-Stevie-T-1.0.2-Win64Bit.exe
-
Size
13.3MB
-
MD5
f293bc88be9c8a1269a9591781419856
-
SHA1
a48718f0f9343cee1f378ad7bdec9cf0ca52d9d4
-
SHA256
8e2a138fa8d0b68a4fc0ec76f93c508fd298c03757a1001246360799b327da27
-
SHA512
2673cfe014facaa8cf2a6cbab891e2ab0edd04c6f5de931162bfd53e82f65a0ca9f4d9682d94b22588346b9d984f7d4a67a1db8c8ac4d9e3eae0d33f96991a38
-
SSDEEP
393216:rjF9d6BYZoTAv2zSfKdlBkkZSGlf2R+tN:FOBY+0Pyykff2RwN
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ML-Sound-Lab-Amped-Stevie-T-1.0.2-Win64Bit.exe"C:\Users\Admin\AppData\Local\Temp\ML-Sound-Lab-Amped-Stevie-T-1.0.2-Win64Bit.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-VQV5O.tmp\ML-Sound-Lab-Amped-Stevie-T-1.0.2-Win64Bit.tmp"C:\Users\Admin\AppData\Local\Temp\is-VQV5O.tmp\ML-Sound-Lab-Amped-Stevie-T-1.0.2-Win64Bit.tmp" /SL5="$4010A,13246304,780800,C:\Users\Admin\AppData\Local\Temp\ML-Sound-Lab-Amped-Stevie-T-1.0.2-Win64Bit.exe"2⤵
- Executes dropped EXE
- Suspicious behavior: GetForegroundWindowSpam
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.5MB
MD52226e88afa1e69a0f0454796c66fa5f0
SHA1c549bdbf3eaf3be712179fe092e2eef8e758b02f
SHA25696404db2e5c21b45e2e547716a0f7f45cdf0051ba6f756f6193aba8990441b52
SHA5124b0e099711cb1ecaa41e741c57c15123e265b5fa222bcd6b4a60b6a1ac1da165f5c585b1ca58d58464429badd2df5d165b4e3885f4b3f6dd9fecf9458da02a05
-
Filesize
4KB
-
Filesize
2.5MB
-
Filesize
4KB
-
Filesize
816KB
-
Filesize
816KB