Analysis
-
max time kernel
22s -
max time network
5s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
06-08-2024 21:40
General
-
Target
X-Aviation/xaLicenseGenerator.exe
-
Size
450KB
-
MD5
cd2232f1411d3a55f9158e21b63dbeac
-
SHA1
0e285052043c2a998ae40f2176c80bdc98d94adb
-
SHA256
dc8bcf028b4205b6fd3ac10704b6b931fe94cab8c7c429347b7a97f66be75679
-
SHA512
fa84c114d1fb78efa2544b4f99e9d189af8be3c396195de448bbec16566a7d2576b74a4cb8d18579b071b906d9d2d4cf0ddb95b8e9eb45f385a86731ac4508e2
-
SSDEEP
6144:NMdgP9yxdzl1KD8fc7uMwvFPc6m+o36gj+L:NMdA9mzWwfcSM4xk5
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\X-Aviation\xaLicenseGenerator.exe"C:\Users\Admin\AppData\Local\Temp\X-Aviation\xaLicenseGenerator.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
472KB
-
Filesize
8KB
-
Filesize
752KB
-
Filesize
24KB
-
Filesize
10.8MB
-
Filesize
8KB
-
Filesize
10.8MB