Analysis
- max time kernel
118s - max time network
122s - platform
windows7_x64 - resource
win7-20240319-en - resource tags
- submitted
08/04/2024, 09:14
General
- Target Internet Download Manager 6.42 Build 7 Multilingual Retail/idman642build7f_Downloadly.ir.exe
- Size 11.5MB
- Sample240408-k7l1fsdf85
- SHA256 0030f7369113888430c728c3a2a6c7673c2305c5f5b1248a66e1f4fcb0802a6b
Score
4/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Internet Download Manager 6.42 Build 7 Multilingual Retail\idman642build7f_Downloadly.ir.exe"C:\Users\Admin\AppData\Local\Temp\Internet Download Manager 6.42 Build 7 Multilingual Retail\idman642build7f_Downloadly.ir.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp"C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp" -d "C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\"2⤵
- Executes dropped EXE
- Suspicious behavior: GetForegroundWindowSpam
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
IDM1.tmp
memory/2184-5-0x0000000000400000-0x000000000042B000-memory.dmp
memory/2368-0-0x0000000000400000-0x000000000040C000-memory.dmp
memory/2368-3-0x0000000000400000-0x000000000040C000-memory.dmp
memory/2368-2-0x00000000002D0000-0x00000000002FB000-memory.dmp