Analysis
-
max time kernel
142s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
28-07-2024 23:16
General
-
Target
polymc.exe
-
Size
10.8MB
-
MD5
341d7ac79625c3ab885d90ed5ce9ab2b
-
SHA1
11139fcba6c8124dbe03a90058a2241dc7a70118
-
SHA256
7b8f33c02ba9e3fd92ae5df31088c47cef1afb0acd2c2eef1ecd309b465c84a4
-
SHA512
9adf7da50ac181d418e26f5feb22f6cc93e9b11299159ca58cfd8fd0e2c5d9a6376737a08dd8aab79f1a1d12d269ed77c23c779f1de8b91fa97dc42e622a6b31
-
SSDEEP
98304:dIzA2C+GqLsi9u7mSs6/VxJxm56rdYNU47WSMg2ENuKlJe5V3L:R64s6lx0GdHrpENXo
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\polymc.exe"C:\Users\Admin\AppData\Local\Temp\polymc.exe"1⤵
- Checks computer location settings
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
-
Filesize
176KB
-
Filesize
88KB
-
Filesize
88KB
-
Filesize
144KB
-
Filesize
8.2MB
-
Filesize
2.2MB
-
Filesize
1.6MB
-
Filesize
1.7MB
-
Filesize
376KB
-
Filesize
6.2MB
-
Filesize
5.8MB
-
Filesize
176KB
-
Filesize
1.8MB
-
Filesize
2.8MB
-
Filesize
8.3MB
-
Filesize
208KB
-
Filesize
176KB
-
Filesize
268KB
-
Filesize
128KB
-
Filesize
1.2MB
-
Filesize
116KB
-
Filesize
784KB
-
Filesize
1.1MB
-
Filesize
376KB
-
Filesize
68KB
-
Filesize
104KB
-
Filesize
92KB
-
Filesize
88KB
-
Filesize
584KB
-
Filesize
144KB
-
Filesize
260KB
-
Filesize
5.8MB
-
Filesize
8.3MB