Analysis

  • max time kernel
    36s
  • max time network
    43s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/06/2024, 07:30

General

  • Target

    TGMacro.exe

  • Size

    811KB

  • MD5

    5b0add532473a8b98e0196c02100e0ec

  • SHA1

    117f9df4899f2e1f61495a9c2ca80fd8321b8ad9

  • SHA256

    29cf266079de80dac853d1d7c5d4c83eadb1d6f9cd8733605414d66413fba31d

  • SHA512

    07bea3d594c19243e4edc535dcfd7e6c398796c48b7fb5ee8fb8c33eb47c0b095045ce1bbdd9037e325ca8990227b18bdeaf6717a456eb64007743b11fc1d636

  • SSDEEP

    6144:nn9zSMD2+54J9ooi1c0gymFEymFEymFEymFEymFixWr4ymJ+T:nn9154J9oB1FLsssszMrTV

Score
1/10

Malware Config

Signatures

  • Modifies registry class 8 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TGMacro.exe
    "C:\Users\Admin\AppData\Local\Temp\TGMacro.exe"
    1⤵
    • Modifies registry class
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:4912

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4912-0-0x00000000750BE000-0x00000000750BF000-memory.dmp

          Filesize

          4KB

        • memory/4912-1-0x0000000000740000-0x0000000000810000-memory.dmp

          Filesize

          832KB

        • memory/4912-2-0x0000000005720000-0x0000000005CC4000-memory.dmp

          Filesize

          5.6MB

        • memory/4912-3-0x0000000005210000-0x00000000052A2000-memory.dmp

          Filesize

          584KB

        • memory/4912-4-0x00000000052B0000-0x00000000052BA000-memory.dmp

          Filesize

          40KB

        • memory/4912-5-0x00000000750B0000-0x0000000075860000-memory.dmp

          Filesize

          7.7MB

        • memory/4912-6-0x00000000750B0000-0x0000000075860000-memory.dmp

          Filesize

          7.7MB

        • memory/4912-7-0x0000000008D70000-0x00000000090C4000-memory.dmp

          Filesize

          3.3MB

        • memory/4912-8-0x0000000006490000-0x00000000064B2000-memory.dmp

          Filesize

          136KB

        • memory/4912-9-0x00000000750BE000-0x00000000750BF000-memory.dmp

          Filesize

          4KB

        • memory/4912-10-0x00000000750B0000-0x0000000075860000-memory.dmp

          Filesize

          7.7MB

        • memory/4912-11-0x00000000750B0000-0x0000000075860000-memory.dmp

          Filesize

          7.7MB

        • memory/4912-13-0x00000000750B0000-0x0000000075860000-memory.dmp

          Filesize

          7.7MB