Analysis
-
max time kernel
87s -
max time network
162s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
14-07-2024 17:48
Behavioral task
behavioral1
Sample
IDA Pro 8.3 (x86, x86_64)/ida.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
IDA Pro 8.3 (x86, x86_64)/ida.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
IDA Pro 8.3 (x86, x86_64)/ida64.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
IDA Pro 8.3 (x86, x86_64)/ida64.exe
Resource
win10v2004-20240709-en
General
-
Target
IDA Pro 8.3 (x86, x86_64)/ida.exe
-
Size
4.0MB
-
MD5
05c7e465d9d88e94e064a99dc36f4ce1
-
SHA1
e87ccd7bcfa05a30aa283c5e5953ba368ff75bed
-
SHA256
d2650a12440bdc4f1b34456956221764c249060e808194b79152e9f679dd4e85
-
SHA512
a9af650ea3518f88c5f8d9e1d059fd039c88d70b733ccec4107f75b14b6d9489a79dffa3ff5fbd7343ebeeb0ae90d26cdac64b79da006b5cb0c25316a66aacc4
-
SSDEEP
49152:5MPnm/Zi34DKYj0ZkO4+XTcSq8EQtezdGfPko7FjOeBfDMmpwfFcnQOh6H6RBvV9:5smOqjcXA0nexReBv6avGBXMi+7Wg
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
Processes:
ida.exepid process 1252 ida.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes:
AUDIODG.EXEdescription pid process Token: 33 3128 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 3128 AUDIODG.EXE -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
ida.exepid process 1252 ida.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\IDA Pro 8.3 (x86, x86_64)\ida.exe"C:\Users\Admin\AppData\Local\Temp\IDA Pro 8.3 (x86, x86_64)\ida.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:1252
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x4e8 0x4f81⤵
- Suspicious use of AdjustPrivilegeToken
PID:3128