Analysis
-
max time kernel
131s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
-
submitted
03/06/2024, 12:44
General
-
Target
dids.exe
-
Size
140KB
-
MD5
a7f667638f0c2fcdb2cd6be8119cf52e
-
SHA1
70406b2108cd2874c2cf7757ac8604eb9e91c473
-
SHA256
b4f8b34082780a88d5ca6dcb6b66ddccece01a2ba198494ce3b1b8bfb508b7d8
-
SHA512
8f8b207fb0f61eada66ac00fa1134a77fe6b53375c3c928937f0ece6f5a9e52abb3553ada7a7060dabb8f94a3651f831b7f6ed694c9a6d04171d19e0bfa1032c
-
SSDEEP
1536:BGtgHEjSO//C78d78wu7hWagwrLiJYe/zVkLwtomzAzpD6szlGQX7icICnOO:0LjSO/9d7v0W3GerPt1zy6stWcI0
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of FindShellTrayWindow 3 IoCs
-
Suspicious use of SendNotifyMessage 3 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 11 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\dids.exe"C:\Users\Admin\AppData\Local\Temp\dids.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\lib\bin\javaw.exe"C:\Users\Admin\AppData\Local\Temp\lib\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Local\Temp\dids.exe"2⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\lib\bin\java.exe"lib\bin\java.exe" -jar lib\lib\dids-lib.jar3⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
58B
MD56858fe4fd33d38da7481b99230cf2728
SHA1c797d5ad59050dee254956d7c10a85cd31b29f9f
SHA256a1c3e12076d2e10056d576a5202f25416ed87fca2f939224e348d9f04954e730
SHA51205d96b4f18228dbd2ea71c2f82a3a0bcb2919ca20dda85d558ca52184125abef2c1bb8439e85fceb2759b1de98e86d269fdff4a8b5be5c785d4acc239256eb3a
-
Filesize
160KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
84KB
-
Filesize
160KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
4KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
4KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
4KB