Analysis
-
max time kernel
63s -
max time network
64s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
21-05-2024 15:09
General
-
Target
Evon.zip
-
Size
459KB
-
MD5
6a41a30b4b63f81ae5e93e51d1f1c045
-
SHA1
101d1b15eab07166428392c8980a157f1968b018
-
SHA256
15c60b9188ef2cc9228ea576732f3b60eac10ca6e39f8a39956bad5722176650
-
SHA512
4d10c2fd0a97bb498d4999c10061bf04e1348d14c914a648e2a4d178168c0a3a675e07f085a6c304e2a11b81d1e04a9994389bdee34118c917311d01a7986446
-
SSDEEP
12288:iLSTkqudsU0Yz3jBL75xwc4XscIFl4zA6fzvBLskwRe:WSYquuKjRdxwr81FlQxfDxskV
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of FindShellTrayWindow 4 IoCs
-
Suspicious use of SendNotifyMessage 3 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Evon.zip1⤵
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\GetProtect.M2TS"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
208KB
-
Filesize
992KB
-
Filesize
2.7MB
-
Filesize
16.7MB