Analysis

  • max time kernel
    138s
  • max time network
    156s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240709-en
  • resource tags

    arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    14-07-2024 18:46

General

  • Target

    IDA Pro 8.3 (x86, x86_64)/ida.exe

  • Size

    4.0MB

  • MD5

    05c7e465d9d88e94e064a99dc36f4ce1

  • SHA1

    e87ccd7bcfa05a30aa283c5e5953ba368ff75bed

  • SHA256

    d2650a12440bdc4f1b34456956221764c249060e808194b79152e9f679dd4e85

  • SHA512

    a9af650ea3518f88c5f8d9e1d059fd039c88d70b733ccec4107f75b14b6d9489a79dffa3ff5fbd7343ebeeb0ae90d26cdac64b79da006b5cb0c25316a66aacc4

  • SSDEEP

    49152:5MPnm/Zi34DKYj0ZkO4+XTcSq8EQtezdGfPko7FjOeBfDMmpwfFcnQOh6H6RBvV9:5smOqjcXA0nexReBv6avGBXMi+7Wg

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\IDA Pro 8.3 (x86, x86_64)\ida.exe
    "C:\Users\Admin\AppData\Local\Temp\IDA Pro 8.3 (x86, x86_64)\ida.exe"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:1292
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x00000000000004E4 0x00000000000004D8
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4308

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1292-1-0x00007FF69E100000-0x00007FF69E500000-memory.dmp

    Filesize

    4.0MB

  • memory/1292-2-0x0000026C59360000-0x0000026C59370000-memory.dmp

    Filesize

    64KB

  • memory/1292-0-0x00007FFEC1A30000-0x00007FFEC1F88000-memory.dmp

    Filesize

    5.3MB