e1105070ba828007508566e28a2b8d4c65d192e9eaf3b7868382b7cae747b397

Analysis

max time kernel
149s
max time network
117s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
06-05-2024 09:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

eicar_com.zip
Size

184B
MD5

6ce6f415d8475545be5ba114f208b0ff
SHA1

d27265074c9eac2e2122ed69294dbc4d7cce9141
SHA256

2546dcffc5ad854d4ddc64fbf056871cd5a00f2471cb7a5bfd4ac23b6e9eedad
SHA512

d9305862fe0bf552718d19db43075d88cffd768974627db60fa1a90a8d45563e035a6449663b8f66aac53791d77f37dbb5035159aa08e69fc473972022f80010

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
2800	vlc.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2800	vlc.exe

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
2800	vlc.exe
2800	vlc.exe
2800	vlc.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
2800	vlc.exe
2800	vlc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2800	vlc.exe

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\eicar_com.zip
1⤵
PID:3016

C:\Windows\System32\CScript.exe
"C:\Windows\System32\CScript.exe" "C:\Users\Admin\Desktop\CompareRequest.vbs"
1⤵
PID:552

C:\Program Files\VideoLAN\VLC\vlc.exe
"C:\Program Files\VideoLAN\VLC\vlc.exe"
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2800

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Public\Desktop\Adobe Reader 9.lnk

Filesize
1KB

MD5
96dec898c55c96edbf23782e2ccf218d

SHA1
e34cb76a073d804641eb73a7a3366ce1b6b31cfa

SHA256
ebc1dfd509982fea0e53332be343f0266ce7c2964a06f743be9049f74f56ebef

SHA512
5a2d6375f04d03d26b385bd839c945b8fa27d50873bf05f2fe11723883f18a09fad8eba7bc21173b8bea33b2df298e366429c5b2716aa6870a699a4c7dbe7baa

Download Submit
C:\Users\Public\Desktop\Firefox.lnk

Filesize
931B

MD5
7c703d451282eb9b7ce36ee19e72dbe8

SHA1
7f25a12d7070305990852085dc1ca854d9c8b97d

SHA256
a7a4a58b5887eee1d0febd38749f7cb3372b50bf1f2097fd9396b08384efe064

SHA512
adbcbd63ec5a1b421eab1ce4801be08dc0b8eefa3eabd410cfe831224128cda2bd00210bed0f645f564c4beae0c2ee76bad9fe583712a501f097590d4fb764b8

Download Submit
C:\Users\Public\Desktop\Google Chrome.lnk

Filesize
2KB

MD5
3d59cd392c290bec1da078d7a2a59a3e

SHA1
1c3f99dedc01cc0020813b00bd22ac0696180358

SHA256
7f1ea43c2966d5a81e2fa7b3e0ae07bb199b706ebfb52fc1c9dda7d72b5a16cc

SHA512
ddba0774e2cc631d247432aa0f806f992c019d0c5b82f236a11245d6a76897577ae71e51014462c0a00e7638ce6dc2c180d922085a2f0db216a556fe955b0cdc

Download Submit
memory/2800-7-0x000007FEF70C0000-0x000007FEF70D7000-memory.dmp

Filesize
92KB

Download
memory/2800-3-0x000000013FF60000-0x0000000140058000-memory.dmp

Filesize
992KB

Download
memory/2800-6-0x000007FEFAFA0000-0x000007FEFAFB8000-memory.dmp

Filesize
96KB

Download
memory/2800-4-0x000007FEF5E90000-0x000007FEF5EC4000-memory.dmp

Filesize
208KB

Download
memory/2800-5-0x000007FEF5BD0000-0x000007FEF5E84000-memory.dmp

Filesize
2.7MB

Download
memory/2800-8-0x000007FEF6C20000-0x000007FEF6C31000-memory.dmp

Filesize
68KB

Download
memory/2800-9-0x000007FEF5A80000-0x000007FEF5A97000-memory.dmp

Filesize
92KB

Download
memory/2800-10-0x000007FEF5A60000-0x000007FEF5A7D000-memory.dmp

Filesize
116KB

Download
memory/2800-11-0x000007FEF5A40000-0x000007FEF5A51000-memory.dmp

Filesize
68KB

Download
memory/2800-13-0x000007FEF4920000-0x000007FEF4987000-memory.dmp

Filesize
412KB

Download
memory/2800-12-0x000007FEF4990000-0x000007FEF5A3B000-memory.dmp

Filesize
16.7MB

Download