Analysis

  • max time kernel
    141s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 10:20

General

  • Target

    PlantsVsZombies.exe

  • Size

    11.1MB

  • MD5

    5eb4b93a103edc16ec6655485ad85982

  • SHA1

    e2b56a04c40247175085e5c32c6367db323c105e

  • SHA256

    acfcb9eae3409391218e69ff3fe5c9424a4486d7ec752e889a59bf6bc784d961

  • SHA512

    fe4a81562037f4fa4c005dc27b180311eb855bcb40c8fab981ba88567ef0b90528dd780e6239b810a5cb221c32b50eb29bbf524897ed3bda57b78d42e0f0d47b

  • SSDEEP

    49152:XIaZv0mROsx3R+ijGgz4FKE6Gz9SmaeeDRoh2xO/pDyYJNo/KUAMCphx96S7kufd:Xn0Sf6ijFUPYeeDihXYeMCPfIW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\PlantsVsZombies.exe
    "C:\Users\Admin\AppData\Local\Temp\PlantsVsZombies.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2156

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2156-0-0x0000000000400000-0x0000000000FC8000-memory.dmp

    Filesize

    11.8MB

  • memory/2156-2-0x0000000001180000-0x000000000118A000-memory.dmp

    Filesize

    40KB

  • memory/2156-1-0x0000000001180000-0x000000000118A000-memory.dmp

    Filesize

    40KB

  • memory/2156-3-0x0000000010000000-0x0000000010041000-memory.dmp

    Filesize

    260KB

  • memory/2156-173-0x0000000000400000-0x0000000000FC8000-memory.dmp

    Filesize

    11.8MB

  • memory/2156-174-0x0000000001180000-0x000000000118A000-memory.dmp

    Filesize

    40KB

  • memory/2156-175-0x0000000001180000-0x000000000118A000-memory.dmp

    Filesize

    40KB

  • memory/2156-176-0x0000000010000000-0x0000000010041000-memory.dmp

    Filesize

    260KB

  • memory/2156-177-0x0000000010000000-0x0000000010041000-memory.dmp

    Filesize

    260KB

  • memory/2156-178-0x0000000010000000-0x0000000010041000-memory.dmp

    Filesize

    260KB

  • memory/2156-179-0x0000000010000000-0x0000000010041000-memory.dmp

    Filesize

    260KB

  • memory/2156-180-0x0000000010000000-0x0000000010041000-memory.dmp

    Filesize

    260KB

  • memory/2156-181-0x0000000010000000-0x0000000010041000-memory.dmp

    Filesize

    260KB

  • memory/2156-182-0x0000000010000000-0x0000000010041000-memory.dmp

    Filesize

    260KB

  • memory/2156-183-0x0000000010000000-0x0000000010041000-memory.dmp

    Filesize

    260KB

  • memory/2156-184-0x0000000010000000-0x0000000010041000-memory.dmp

    Filesize

    260KB

  • memory/2156-185-0x0000000010000000-0x0000000010041000-memory.dmp

    Filesize

    260KB

  • memory/2156-186-0x0000000010000000-0x0000000010041000-memory.dmp

    Filesize

    260KB

  • memory/2156-187-0x0000000010000000-0x0000000010041000-memory.dmp

    Filesize

    260KB

  • memory/2156-188-0x0000000010000000-0x0000000010041000-memory.dmp

    Filesize

    260KB

  • memory/2156-189-0x0000000010000000-0x0000000010041000-memory.dmp

    Filesize

    260KB

  • memory/2156-190-0x0000000010000000-0x0000000010041000-memory.dmp

    Filesize

    260KB