Analysis
- max time kernel
134s - max time network
171s - platform
windows10-2004_x64 - resource
win10v2004-20240802-en - resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system - submitted
09/08/2024, 09:06
Behavioral task
behavioral1
Sample
IDA Pro 8.3.230608 (Windows) (x86,x64)/IDA/ida.exe
Resource
win10v2004-20240802-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
IDA Pro 8.3.230608 (Windows) (x86,x64)/IDA/ida64.exe
Resource
win10v2004-20240802-en
3 signatures
150 seconds
General
- Target IDA Pro 8.3.230608 (Windows) (x86,x64)/IDA/ida.exe
- Size 4.0MB
- Sample240809-k264faselg
- SHA256 d2650a12440bdc4f1b34456956221764c249060e808194b79152e9f679dd4e85
- MD5 05c7e465d9d88e94e064a99dc36f4ce1
- SHA1 e87ccd7bcfa05a30aa283c5e5953ba368ff75bed
- SHA512 a9af650ea3518f88c5f8d9e1d059fd039c88d70b733ccec4107f75b14b6d9489a79dffa3ff5fbd7343ebeeb0ae90d26cdac64b79da006b5cb0c25316a66aacc4
- SSDEEP 49152:5MPnm/Zi34DKYj0ZkO4+XTcSq8EQtezdGfPko7FjOeBfDMmpwfFcnQOh6H6RBvV9:5smOqjcXA0nexReBv6avGBXMi+7Wg
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 4504 ida.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 3736 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 3736 AUDIODG.EXE - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4504 ida.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\IDA Pro 8.3.230608 (Windows) (x86,x64)\IDA\ida.exe"C:\Users\Admin\AppData\Local\Temp\IDA Pro 8.3.230608 (Windows) (x86,x64)\IDA\ida.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:4504
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x3d0 0x4641⤵
- Suspicious use of AdjustPrivilegeToken
PID:3736