Resubmissions
25/04/2024, 12:43
240425-px387sah33 3Analysis
-
max time kernel
133s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
25/04/2024, 12:43
Static task
static1
Behavioral task
behavioral1
Sample
phobia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
phobia.exe
Resource
win10v2004-20240412-en
General
-
Target
phobia.exe
-
Size
7.2MB
-
MD5
a75de0fa3edd3d601a08fd44ef2f5674
-
SHA1
37116112260080cebf1f78dfd0b541e298d8a3b4
-
SHA256
a912f3edcde567f09397fd5fbb309549189f824a86cf19a2e579fa29c464bf67
-
SHA512
8aad374f3af624b7c91be623ab509c2145e376e12403588d922a8ffd99a25860d7382a588afe5bc96a214c0fcce138c42130829e8c40a6b28b02e648d3927e5b
-
SSDEEP
196608:kU8iAC8f9vybCHxpp1UlyxkxVgoea3Jbu:t8v9vyQp1UlQe
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1644 vlc.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1644 vlc.exe -
Suspicious use of FindShellTrayWindow 21 IoCs
pid Process 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe -
Suspicious use of SendNotifyMessage 20 IoCs
pid Process 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe 1644 vlc.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1644 vlc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\phobia.exe"C:\Users\Admin\AppData\Local\Temp\phobia.exe"1⤵PID:1688
-
C:\Windows\explorer.exe"C:\Windows\explorer.exe"1⤵PID:2964
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\MergeSearch.mpeg"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1644
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
77B
MD5f294c188313f57fd785a200d23a5145b
SHA1985d09b4e410c24c3666c7b31393a145736d7274
SHA256ba6d95827495d759f5f34d02de731fbc3bca2efcaf880b7a34af1e4aff00ebc3
SHA512263e52eb3d3a759761aada119cd5e79b281ae27966a5fb52f8811793446a04fe22e6bb9a3ee23d99b6644e45467af55ca7dbe3d838f714ad6de8252664873d9e