Analysis

  • max time kernel
    143s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    26/09/2024, 14:35

General

  • Target

    Skibidi2.rar

  • Size

    20.9MB

  • MD5

    0b3f0b972f2b76ce9d43e15fe26da47c

  • SHA1

    3c473950f1dd34f55c30a98c254fab8180a5149f

  • SHA256

    ef73b9705db080e09c3a84fb5201fd003f242b06e9a5a9028231efc938ead241

  • SHA512

    10ea567fd9cb8afd4e648ee4f6c4ca7b7d52cb3c79435a4381cbdb2f6ad2b13943a399c9382a169a7657cb1ec08c6f3789026168ccf142ec57be5d46a0f41c29

  • SSDEEP

    393216:ByaUpCe39n3BW8aCuEGnvu0U4KKiPcYfApVgPcLfi2F6y80fxdY24Xod7QaPYsg:ByB3hBW8rTiRKbPccApJij6x+TsEuVg

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 10 IoCs
  • Suspicious use of SendNotifyMessage 9 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 9 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\Skibidi2.rar
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2180
    • C:\Windows\system32\rundll32.exe
      "C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,OpenAs_RunDLL C:\Users\Admin\AppData\Local\Temp\Skibidi2.rar
      2⤵
      • Modifies registry class
      • Suspicious use of WriteProcessMemory
      PID:1868
      • C:\Windows\system32\rundll32.exe
        "C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,OpenAs_RunDLL C:\Users\Admin\AppData\Local\Temp\Skibidi2.rar
        3⤵
        • Modifies registry class
        • Suspicious use of WriteProcessMemory
        PID:2328
        • C:\Program Files\VideoLAN\VLC\vlc.exe
          "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\Skibidi2.rar"
          4⤵
          • Suspicious behavior: AddClipboardFormatListener
          • Suspicious behavior: GetForegroundWindowSpam
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of SetWindowsHookEx
          PID:2364

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2364-30-0x000007FEFB3B0000-0x000007FEFB3E4000-memory.dmp

    Filesize

    208KB

  • memory/2364-29-0x000000013F040000-0x000000013F138000-memory.dmp

    Filesize

    992KB

  • memory/2364-32-0x000007FEFB390000-0x000007FEFB3A8000-memory.dmp

    Filesize

    96KB

  • memory/2364-38-0x000007FEF7A50000-0x000007FEF7A61000-memory.dmp

    Filesize

    68KB

  • memory/2364-33-0x000007FEFB370000-0x000007FEFB387000-memory.dmp

    Filesize

    92KB

  • memory/2364-37-0x000007FEF7A70000-0x000007FEF7A8D000-memory.dmp

    Filesize

    116KB

  • memory/2364-36-0x000007FEF7A90000-0x000007FEF7AA1000-memory.dmp

    Filesize

    68KB

  • memory/2364-35-0x000007FEFB330000-0x000007FEFB347000-memory.dmp

    Filesize

    92KB

  • memory/2364-34-0x000007FEFB350000-0x000007FEFB361000-memory.dmp

    Filesize

    68KB

  • memory/2364-31-0x000007FEF6250000-0x000007FEF6506000-memory.dmp

    Filesize

    2.7MB

  • memory/2364-65-0x000007FEF1080000-0x000007FEF1091000-memory.dmp

    Filesize

    68KB

  • memory/2364-66-0x000007FEF1060000-0x000007FEF1076000-memory.dmp

    Filesize

    88KB

  • memory/2364-70-0x000007FEF0D20000-0x000007FEF0D8D000-memory.dmp

    Filesize

    436KB

  • memory/2364-69-0x000007FEF0ED0000-0x000007FEF0F32000-memory.dmp

    Filesize

    392KB

  • memory/2364-68-0x000007FEF0F40000-0x000007FEF0F82000-memory.dmp

    Filesize

    264KB

  • memory/2364-67-0x000007FEF0F90000-0x000007FEF1055000-memory.dmp

    Filesize

    788KB

  • memory/2364-64-0x000007FEF10A0000-0x000007FEF10CF000-memory.dmp

    Filesize

    188KB

  • memory/2364-63-0x000007FEFB080000-0x000007FEFB090000-memory.dmp

    Filesize

    64KB

  • memory/2364-61-0x000007FEF1990000-0x000007FEF1B10000-memory.dmp

    Filesize

    1.5MB

  • memory/2364-60-0x000007FEF5DB0000-0x000007FEF5DC2000-memory.dmp

    Filesize

    72KB

  • memory/2364-59-0x000007FEF5DD0000-0x000007FEF5DE1000-memory.dmp

    Filesize

    68KB

  • memory/2364-58-0x000007FEF5DF0000-0x000007FEF5E13000-memory.dmp

    Filesize

    140KB

  • memory/2364-57-0x000007FEF5E20000-0x000007FEF5E38000-memory.dmp

    Filesize

    96KB

  • memory/2364-55-0x000007FEF5E70000-0x000007FEF5E98000-memory.dmp

    Filesize

    160KB

  • memory/2364-56-0x000007FEF5E40000-0x000007FEF5E64000-memory.dmp

    Filesize

    144KB

  • memory/2364-51-0x000007FEF5FA0000-0x000007FEF6007000-memory.dmp

    Filesize

    412KB

  • memory/2364-54-0x000007FEF5EA0000-0x000007FEF5EF7000-memory.dmp

    Filesize

    348KB

  • memory/2364-53-0x000007FEF5F00000-0x000007FEF5F11000-memory.dmp

    Filesize

    68KB

  • memory/2364-52-0x000007FEF5F20000-0x000007FEF5F9C000-memory.dmp

    Filesize

    496KB

  • memory/2364-50-0x000007FEF6010000-0x000007FEF6040000-memory.dmp

    Filesize

    192KB

  • memory/2364-49-0x000007FEF68E0000-0x000007FEF68F8000-memory.dmp

    Filesize

    96KB

  • memory/2364-48-0x000007FEF6E00000-0x000007FEF6E11000-memory.dmp

    Filesize

    68KB

  • memory/2364-47-0x000007FEF6E20000-0x000007FEF6E3B000-memory.dmp

    Filesize

    108KB

  • memory/2364-46-0x000007FEF6E40000-0x000007FEF6E51000-memory.dmp

    Filesize

    68KB

  • memory/2364-45-0x000007FEF6E60000-0x000007FEF6E71000-memory.dmp

    Filesize

    68KB

  • memory/2364-44-0x000007FEF6E80000-0x000007FEF6E91000-memory.dmp

    Filesize

    68KB

  • memory/2364-43-0x000007FEF7850000-0x000007FEF7868000-memory.dmp

    Filesize

    96KB

  • memory/2364-42-0x000007FEF7470000-0x000007FEF7491000-memory.dmp

    Filesize

    132KB

  • memory/2364-41-0x000007FEF6EA0000-0x000007FEF6EE1000-memory.dmp

    Filesize

    260KB

  • memory/2364-39-0x000007FEF4860000-0x000007FEF5910000-memory.dmp

    Filesize

    16.7MB

  • memory/2364-62-0x000007FEF1930000-0x000007FEF1947000-memory.dmp

    Filesize

    92KB

  • memory/2364-40-0x000007FEF6040000-0x000007FEF624B000-memory.dmp

    Filesize

    2.0MB