Analysis
-
max time kernel
41s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
-
submitted
29/06/2024, 04:29
General
-
Target
apo/Editor_64.exe
-
Size
1.4MB
-
MD5
ed71aee1c2945dc84715cc5d9957e1da
-
SHA1
4fe09d60c1502d78f8b640b29dc1cb6ebe68c71b
-
SHA256
1af097c2ad78e36c20a3d4249c68ce70185b80558daf619af4ce0edc6e54c508
-
SHA512
cf03962bad4def0123d2277a82f9c449cad210d7a96cd74e0f679e2d53608179fa96f00a19eecb3fd9b13d601b1b048562320f30b133c2284edbe0ed5bde200e
-
SSDEEP
24576:zibaG3pv1sLhBGSYA964ZL/yeaJghgWBkeH6wWwVjZja5:CaoQLeSfB2eaJghgWBkeVnZ
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\apo\Editor_64.exe"C:\Users\Admin\AppData\Local\Temp\apo\Editor_64.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2296 -s 5482⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.4MB
-
Filesize
5.2MB
-
Filesize
64KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
2.3MB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
8KB