Analysis

  • max time kernel
    139s
  • max time network
    138s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    06-05-2024 22:16

General

  • Target

    krampus/krampus/backup.zip

  • Size

    22KB

  • MD5

    9b89aadbad03a6808ff6c5f24ee58466

  • SHA1

    6eb9940bb7510cac5d9e88585a24ac71c6ff7000

  • SHA256

    1f0973e75b0e859028c3793418b40430a2eaa54ab08506607177db4c769c5930

  • SHA512

    230cc216bcfd5eda4a6a99b4b8f1f7306b39bceeebb5c5fac664650221c3472be98188dd0bc5a52b4506cec81c8ff44e093e9a3fcf0c6d23051669f8b7ffddb4

  • SSDEEP

    384:S/It0+C+eTo9doqEsACmZWXo/KNhArDWOA7eJiEBmC8nBwxJhbSDGZ:x++Jio9doqZrmWXtGmveEEMC06XhboA

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\krampus\krampus\backup.zip
    1⤵
      PID:4448
    • C:\Program Files\VideoLAN\VLC\vlc.exe
      "C:\Program Files\VideoLAN\VLC\vlc.exe"
      1⤵
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      PID:4544

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4544-1-0x00007FFA9DFF0000-0x00007FFA9E024000-memory.dmp

      Filesize

      208KB

    • memory/4544-0-0x00007FF747010000-0x00007FF747108000-memory.dmp

      Filesize

      992KB

    • memory/4544-4-0x00007FFAA0670000-0x00007FFAA0687000-memory.dmp

      Filesize

      92KB

    • memory/4544-8-0x00007FFA9DC80000-0x00007FFA9DC91000-memory.dmp

      Filesize

      68KB

    • memory/4544-7-0x00007FFA9DCA0000-0x00007FFA9DCBD000-memory.dmp

      Filesize

      116KB

    • memory/4544-6-0x00007FFA9DCC0000-0x00007FFA9DCD7000-memory.dmp

      Filesize

      92KB

    • memory/4544-5-0x00007FFA9DF80000-0x00007FFA9DF91000-memory.dmp

      Filesize

      68KB

    • memory/4544-2-0x00007FFA9D5A0000-0x00007FFA9D856000-memory.dmp

      Filesize

      2.7MB

    • memory/4544-3-0x00007FFAA06F0000-0x00007FFAA0708000-memory.dmp

      Filesize

      96KB

    • memory/4544-10-0x00007FFA9D530000-0x00007FFA9D597000-memory.dmp

      Filesize

      412KB

    • memory/4544-9-0x00007FFA8C640000-0x00007FFA8D6F0000-memory.dmp

      Filesize

      16.7MB

    • memory/4544-31-0x00007FFA8C640000-0x00007FFA8D6F0000-memory.dmp

      Filesize

      16.7MB