Analysis

  • max time kernel
    149s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    07-06-2024 06:56

General

  • Target

    AutoClickers.exe

  • Size

    944KB

  • MD5

    3a152dcaaf5089d5d9b036b23a837556

  • SHA1

    4d1f14ac947598c4edb5377a0a7b58511b32395c

  • SHA256

    561578eec81dbe229e3eadf84c3e65e646873f23361e33bc32f3809adfdb242e

  • SHA512

    4794514c919bd3bbf57aa7fecaad39f02ed4fccf820f5db2bead1b627c9f0ef9f6149bb433e1c4e389d65096af61bd98a72efb1b48561e1be0b5a633e671a950

  • SSDEEP

    12288:RaWzgMg7v3qnCiYErQohh0F4NCJ8lnyoQxEda6U9DcD+wL87tzhlebE6wkKX:AaHMv6CQrjZnyoQxEda/9DmdmJhAAH

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\AutoClickers.exe
    "C:\Users\Admin\AppData\Local\Temp\AutoClickers.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:2984

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads