Analysis

  • max time kernel
    87s
  • max time network
    162s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14-07-2024 17:48

General

  • Target

    IDA Pro 8.3 (x86, x86_64)/ida.exe

  • Size

    4.0MB

  • MD5

    05c7e465d9d88e94e064a99dc36f4ce1

  • SHA1

    e87ccd7bcfa05a30aa283c5e5953ba368ff75bed

  • SHA256

    d2650a12440bdc4f1b34456956221764c249060e808194b79152e9f679dd4e85

  • SHA512

    a9af650ea3518f88c5f8d9e1d059fd039c88d70b733ccec4107f75b14b6d9489a79dffa3ff5fbd7343ebeeb0ae90d26cdac64b79da006b5cb0c25316a66aacc4

  • SSDEEP

    49152:5MPnm/Zi34DKYj0ZkO4+XTcSq8EQtezdGfPko7FjOeBfDMmpwfFcnQOh6H6RBvV9:5smOqjcXA0nexReBv6avGBXMi+7Wg

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\IDA Pro 8.3 (x86, x86_64)\ida.exe
    "C:\Users\Admin\AppData\Local\Temp\IDA Pro 8.3 (x86, x86_64)\ida.exe"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:1252
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x4e8 0x4f8
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3128

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1252-0-0x00007FF774840000-0x00007FF774C40000-memory.dmp

    Filesize

    4.0MB

  • memory/1252-2-0x0000019701640000-0x0000019701650000-memory.dmp

    Filesize

    64KB

  • memory/1252-1-0x00007FFFBE3B0000-0x00007FFFBE908000-memory.dmp

    Filesize

    5.3MB