Resubmissions

15/09/2024, 12:08

240915-payp7steln 3

15/09/2024, 12:06

240915-n9pqxasgka 3

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    15/09/2024, 12:08

General

  • Target

    W.7.K.1.9.ALL_EDITIONS/Windows 7 Ultimate KEYGEN.exe

  • Size

    2.3MB

  • MD5

    3cc2c1ab0587d9228a847bb97e0e02f5

  • SHA1

    56f491a8674c2bf71f74d8ccd6b628ec675c2be4

  • SHA256

    1058a355814a33570839a7130677d973b106ce04264d7c70ca71a100942afedc

  • SHA512

    824c25f09d41cbc347b9920848eb80079f21125f8530dc6e77d85a2006f5c1aa4e24c347642fe532c4c7233b5df77bf6b704ad6c3df9412951cc85df8556a0cd

  • SSDEEP

    24576:E+/+h+iHoEkbBdhAEDDrEjJPcbXzyK115/01konkj4TCB4o6L2jpZ+:SIJbBhDrkJuOK11B01rkj4q4o6q

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\W.7.K.1.9.ALL_EDITIONS\Windows 7 Ultimate KEYGEN.exe
    "C:\Users\Admin\AppData\Local\Temp\W.7.K.1.9.ALL_EDITIONS\Windows 7 Ultimate KEYGEN.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:2108

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2108-0-0x000007FEF6643000-0x000007FEF6644000-memory.dmp

          Filesize

          4KB

        • memory/2108-1-0x00000000012B0000-0x000000000150E000-memory.dmp

          Filesize

          2.4MB

        • memory/2108-2-0x000007FEF6640000-0x000007FEF702C000-memory.dmp

          Filesize

          9.9MB

        • memory/2108-4-0x000007FEF6640000-0x000007FEF702C000-memory.dmp

          Filesize

          9.9MB

        • memory/2108-5-0x000007FEF6640000-0x000007FEF702C000-memory.dmp

          Filesize

          9.9MB

        • memory/2108-6-0x000007FEF6643000-0x000007FEF6644000-memory.dmp

          Filesize

          4KB

        • memory/2108-7-0x000007FEF6640000-0x000007FEF702C000-memory.dmp

          Filesize

          9.9MB