Analysis
-
max time kernel
85s -
max time network
168s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
09-10-2024 14:50
Behavioral task
behavioral1
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/ida.exe
Resource
win7-20240708-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/ida.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
IDA Pro 8.3/IDA Pro 8.3 (x86, x86_64)/ida.exe
-
Size
4.0MB
-
MD5
05c7e465d9d88e94e064a99dc36f4ce1
-
SHA1
e87ccd7bcfa05a30aa283c5e5953ba368ff75bed
-
SHA256
d2650a12440bdc4f1b34456956221764c249060e808194b79152e9f679dd4e85
-
SHA512
a9af650ea3518f88c5f8d9e1d059fd039c88d70b733ccec4107f75b14b6d9489a79dffa3ff5fbd7343ebeeb0ae90d26cdac64b79da006b5cb0c25316a66aacc4
-
SSDEEP
49152:5MPnm/Zi34DKYj0ZkO4+XTcSq8EQtezdGfPko7FjOeBfDMmpwfFcnQOh6H6RBvV9:5smOqjcXA0nexReBv6avGBXMi+7Wg
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 5016 ida.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5016 ida.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5016 ida.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\IDA Pro 8.3\IDA Pro 8.3 (x86, x86_64)\ida.exe"C:\Users\Admin\AppData\Local\Temp\IDA Pro 8.3\IDA Pro 8.3 (x86, x86_64)\ida.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:5016