Analysis
-
max time kernel
315s -
max time network
617s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
10-06-2024 06:00
General
-
Target
France_connect.exe
-
Size
1.2MB
-
MD5
4b5a07302aa5ada841247e9229126492
-
SHA1
d1dd152404622abe75cd57a6f4b8a2566e90b43b
-
SHA256
b4f04d3340e132716e95f82204ef802231633faab79119f9554a493be86b98b9
-
SHA512
eedb68023a0c26d0009c123a66d079769b1365d9df4f65d834136ef615a3dacd9afa0e01e23c3b9d8076329ed2fa9b1fcb368719bf48da5dcaec06c6f9f10111
-
SSDEEP
24576:GYeO29Y6D6NavZtvx/RfSOFqIWQ/1hIPnd592:o7SN4t1xMXQ/1hIPd59
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of FindShellTrayWindow 9 IoCs
-
Suspicious use of SendNotifyMessage 8 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\France_connect.exe"C:\Users\Admin\AppData\Local\Temp\France_connect.exe"1⤵
- Checks processor information in registry
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\BackupCopy.3gp"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
208KB
-
Filesize
992KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
116KB
-
Filesize
68KB
-
Filesize
92KB
-
Filesize
2.7MB
-
Filesize
92KB
-
Filesize
96KB
-
Filesize
2.0MB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
108KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
96KB
-
Filesize
132KB
-
Filesize
260KB
-
Filesize
16.7MB
-
Filesize
208KB
-
Filesize
2.7MB
-
Filesize
992KB
-
Filesize
16.7MB