Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
11-05-2024 06:47
General
-
Target
Sony Vegas Pro 14 Patch.exe
-
Size
13.6MB
-
MD5
3d6def6f1c49ac28995862ce72d44ec6
-
SHA1
530f387d2539020fe794544a0b76f41fd67091f9
-
SHA256
c22df08df65fdd354ac969dc91d3d3ef4a8157ebd2c8720c52bbc1fac2e54510
-
SHA512
62b2d98c8f29b00c76c975fa7e219b82976ffa16390da8b7055c6c052274b0eba1a20963ee26dc8325965ed64fdd0c0fbb2202987a91fbf2cf7e427786c34d5c
-
SSDEEP
393216:xsUR2F9uK+H052X4oc8OOoBmecNr2ZRG0G6Oxcxt5N:rvH5IZ85YZ/Gf2/D
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 5 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of WriteProcessMemory 14 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Sony Vegas Pro 14 Patch.exe"C:\Users\Admin\AppData\Local\Temp\Sony Vegas Pro 14 Patch.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-SSHB5.tmp\Sony Vegas Pro 14 Patch.tmp"C:\Users\Admin\AppData\Local\Temp\is-SSHB5.tmp\Sony Vegas Pro 14 Patch.tmp" /SL5="$400EE,13790952,477184,C:\Users\Admin\AppData\Local\Temp\Sony Vegas Pro 14 Patch.exe"2⤵
- Executes dropped EXE
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\regsvr32.exe"C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\VEGAS\Shared Plug-Ins\Audio_x64\mchammer_x64.dll"3⤵
- Loads dropped DLL
-
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.2MB
MD5d2bda63a35b6eb8b9b25dbc13b740d15
SHA128d9c5b3ec534f13493adbfeb8477c323f861383
SHA256c2a592c49a21d58999495bd6c2860ac749ed8c4049620c212689a8a93a7238bf
SHA512a10cf2f087b808d386770ce871f345502920f9809b450c70d22f784ee7c23c632d36f86206cfa0795d94be62699c208498fd3ea092aacb38960ca10c72bd57a7
-
Filesize
1.5MB
MD54e36eefd8af8607ffa74c543bca21fdb
SHA105058307797aac1e1ed52507d23dc0e172bf31b2
SHA256ac6a2fd94cf9a132ecc0253ca1e223c324bea9d7eea892cf60191fa4e8b6dc92
SHA512fb64d132c8c4fe5439caa2b0209719898d39adf21bfd2b45a0931769068ccfae44e1d88175235502243dd285702dfe17da7d27f2287d050bb8045ac6647b9b71
-
Filesize
68KB
-
Filesize
504KB
-
Filesize
504KB
-
Filesize
1.5MB
-
Filesize
1.5MB