Analysis

  • max time kernel
    14s
  • max time network
    20s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    14-11-2024 18:23

General

  • Target

    GrowCastleAutobot-main/Clickermann v4.13 x64.rar

  • Size

    2.5MB

  • MD5

    9d1b7823790b1b7bcbf47e6d82227842

  • SHA1

    fccd87c64636ea3750ce8c0ea04ea9bd0af846c3

  • SHA256

    3f228d3a4fb93aee4c1b28927f47583f51e56b34a2abd82aff695943d89e0a26

  • SHA512

    80aed7c2e682c5f46aa76f99974b5cf0fd8bf0e00dabc19098ffd9c3ffd44cc734ded7691c721b5e51f0e9fe491efcfaf6d97292c2dbc7cf074197c3da1ed7e8

  • SSDEEP

    49152:hjSLA5YUtrDLI7LmEzuXmQseXLPzkodCU+Lf5/vwz5qeXDzoT1GlCP:A05YUtrD0GmQDLMU+Dyz5gTg8P

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\GrowCastleAutobot-main\Clickermann v4.13 x64.rar"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:2380

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads