Overview
overview
10Static
static
10ida.exe
windows7-x64
1ida.exe
windows10-2004-x64
1ida64.exe
windows7-x64
1ida64.exe
windows10-2004-x64
1idapyswitch.exe
windows7-x64
1idapyswitch.exe
windows10-2004-x64
1idat.exe
windows7-x64
1idat.exe
windows10-2004-x64
1idat64.exe
windows7-x64
1idat64.exe
windows10-2004-x64
1qwingraph.exe
windows7-x64
1qwingraph.exe
windows10-2004-x64
1Analysis
-
max time kernel
24s -
max time network
23s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
26-07-2024 13:11
Behavioral task
behavioral1
Sample
ida.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ida.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
ida64.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
ida64.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
idapyswitch.exe
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
idapyswitch.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
idat.exe
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
idat.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
idat64.exe
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
idat64.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
qwingraph.exe
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
qwingraph.exe
Resource
win10v2004-20240709-en
General
-
Target
qwingraph.exe
-
Size
473KB
-
MD5
3fb5202f388ca3ada3ab12fed5d7207e
-
SHA1
4699eaab910b858086af99b907578ab4cc935dd9
-
SHA256
287aba535fc5a304fc2cabbcabbe09f503bd80d7321ca0e45042e6229fce673a
-
SHA512
e9698d7a6e1030c549325157e9e04a9c5efa453aaae753e92d2cec270fa57228b8ad069987275b56f8442cd68f8b6fc3245853c288ff74609bd20f823797344f
-
SSDEEP
12288:XgSnO4ZjPUwXz2qDfMjZfCIKuh/42KLJ46:XgV4BNXiqDfMjZfCIKuS9L
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1356 qwingraph.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1356 qwingraph.exe