Overview

overview

7

Static

static

3

f03ad0794f...7e.exe

windows7-x64

7

f03ad0794f...7e.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ng.exe

windows7-x64

1

$PLUGINSDI...ng.exe

windows10-2004-x64

1

$PLUGINSDI...ry.exe

windows7-x64

1

$PLUGINSDI...ry.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    149s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    07-07-2024 05:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    $PLUGINSDIR/squaring.exe

  • Size

    139KB

  • MD5

    fda656c75b581d0dce6537d159052bcd

  • SHA1

    a06523896f54e51a1a7269356634cc0bbb069edd

  • SHA256

    4ce66c1b06bab37a85a93c5e7d7c9ba6f79da608fab33a00c44b8b0a9443309d

  • SHA512

    8e7928c0e0439da880b7f2b036aa4f89cabb365bfe83c17184336580101c96d3b1f2c2ddc254a99a73d7cd0e203c40a1b22f68ad803070d2537c82fb95718106

  • SSDEEP

    3072:zs5j0FMPXJKD4va+Rr3LkR8NjQwnSSxAdw0OJfrSheFvIbE7NPNGv6iBDQlU:I5j02Pk8a+R80EwhnJfrSheFgiCQq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\squaring.exe
    "C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\squaring.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads