Analysis

  • max time kernel
    118s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    11-09-2024 14:43

General

  • Target

    install/AutoIt3_x64.exe

  • Size

    990KB

  • MD5

    0c45b1af9f410771bfd1740f40dc4173

  • SHA1

    b896091855905e152abf260a64ebdf8b0c38aeb4

  • SHA256

    3f1a80889fc13d98a26b8b6ac034d8ff4a04a5e3fe6c41c994585f5ba3e32bb2

  • SHA512

    b23e2cb50ed312cb261df84a87283520079cd479ca16c19079abfce4f5ea18cbc730a191af480431f99d5a062e4b853745140d5e9d40003395f16b5867a11d5e

  • SSDEEP

    24576:uomUFhNcmLFj4svqaShRsUiTfjo5ya8j8k:uCGmxj4svqaShRibza8T

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 20 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\install\AutoIt3_x64.exe
    "C:\Users\Admin\AppData\Local\Temp\install\AutoIt3_x64.exe"
    1⤵
    • Modifies registry class
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2500

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2500-0-0x0000000004650000-0x0000000004660000-memory.dmp

    Filesize

    64KB