Analysis
- max time kernel
89s - max time network
171s - platform
windows10-2004_x64 - resource
win10v2004-20240802-en - resource tags
- submitted
09/08/2024, 09:06
General
- Target IDA Pro 8.3.230608 (Windows) (x86,x64)/IDA/ida64.exe
- Size 4.0MB
- Sample240809-k264faselg
- SHA256 c695b8de0b3cb3b152890625ec3e0495bad2cd1b257c89de3169b35e3d67b44c
Score
1/10
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious use of AdjustPrivilegeToken 2 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\IDA Pro 8.3.230608 (Windows) (x86,x64)\IDA\ida64.exe"C:\Users\Admin\AppData\Local\Temp\IDA Pro 8.3.230608 (Windows) (x86,x64)\IDA\ida64.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x510 0x2f01⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2296-1-0x00007FF69CFC0000-0x00007FF69D3C2000-memory.dmp
memory/2296-0-0x00007FFA2F720000-0x00007FFA2FC78000-memory.dmp
memory/2296-2-0x0000017B41520000-0x0000017B41530000-memory.dmp