Analysis

  • max time kernel
    140s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    03/06/2024, 14:58

General

  • Target
    DesignBuilder.v2.2.4.001-RECOiL/crack/designbuilder.v2.2.4.001-patch.exe
  • Size 189KB
  • Sample240603-scgfgsbd99
  • SHA256 53f05c51cec102a18f7750681ccf847f82cbc8c5ee7afaf4856f3d2ad8c8c71e
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\DesignBuilder.v2.2.4.001-RECOiL\crack\designbuilder.v2.2.4.001-patch.exe
    "C:\Users\Admin\AppData\Local\Temp\DesignBuilder.v2.2.4.001-RECOiL\crack\designbuilder.v2.2.4.001-patch.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2856

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        bassmod.dll

        • Path \Users\Admin\AppData\Local\Temp\bassmod.dll
        • Size 33KB
        • SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
        • MD5 SHA1 SHA512 SSDEEP

        memory/2856-10-0x0000000010000000-0x0000000010013000-memory.dmp

        memory/2856-13-0x0000000010000000-0x0000000010013000-memory.dmp

        memory/2856-5-0x0000000010000000-0x0000000010013000-memory.dmp

        memory/2856-6-0x0000000010000000-0x0000000010013000-memory.dmp

        memory/2856-7-0x0000000010000000-0x0000000010013000-memory.dmp

        memory/2856-8-0x0000000010000000-0x0000000010013000-memory.dmp

        memory/2856-9-0x0000000010000000-0x0000000010013000-memory.dmp

        memory/2856-0-0x0000000000400000-0x000000000043F000-memory.dmp

        memory/2856-4-0x0000000010000000-0x0000000010013000-memory.dmp

        memory/2856-11-0x0000000000400000-0x000000000043F000-memory.dmp

        memory/2856-12-0x0000000010000000-0x0000000010013000-memory.dmp

        memory/2856-14-0x0000000010000000-0x0000000010013000-memory.dmp

        memory/2856-15-0x0000000010000000-0x0000000010013000-memory.dmp

        memory/2856-16-0x0000000010000000-0x0000000010013000-memory.dmp

        memory/2856-17-0x0000000010000000-0x0000000010013000-memory.dmp

        memory/2856-18-0x0000000010000000-0x0000000010013000-memory.dmp

        memory/2856-19-0x0000000010000000-0x0000000010013000-memory.dmp

        memory/2856-20-0x0000000010000000-0x0000000010013000-memory.dmp