Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    21-11-2024 08:16

General

  • Target

    PanoramaStudio4Pro.exe

  • Size

    13.6MB

  • MD5

    691e2b86ee66a02d91724057eda6b9f5

  • SHA1

    23ceac6601eff4358505f703e8b556b0100c056c

  • SHA256

    4b48907e6171e0e2291a4fb95239ddcc398bac79872ef90f55b369b1f66cb7eb

  • SHA512

    433b4c9a12577c805840a785c2ed271496388afd6fa988b494ab9baa9c0d02d7bf59598f01881826892a7506172623c918e23b95fbe6dabaad4d0d3e1ff94532

  • SSDEEP

    196608:nEXQC/8jeN5ifIvdBXiU0JQaiYKaV/SWItmkh:Ac6XPX4QaiYKaV/SWItdh

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\PanoramaStudio4Pro.exe
    "C:\Users\Admin\AppData\Local\Temp\PanoramaStudio4Pro.exe"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2084

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2084-0-0x000007FEF5A30000-0x000007FEF5F83000-memory.dmp

    Filesize

    5.3MB

  • memory/2084-2-0x0000000001EC0000-0x0000000001EC1000-memory.dmp

    Filesize

    4KB

  • memory/2084-3-0x0000000001EE0000-0x0000000001EF0000-memory.dmp

    Filesize

    64KB

  • memory/2084-1-0x000000013F220000-0x000000014086C000-memory.dmp

    Filesize

    22.3MB

  • memory/2084-5-0x0000000002460000-0x000000000246A000-memory.dmp

    Filesize

    40KB

  • memory/2084-4-0x0000000002460000-0x000000000246A000-memory.dmp

    Filesize

    40KB

  • memory/2084-10-0x0000000002460000-0x000000000246A000-memory.dmp

    Filesize

    40KB

  • memory/2084-9-0x0000000001EE0000-0x0000000001EF0000-memory.dmp

    Filesize

    64KB

  • memory/2084-11-0x0000000002460000-0x000000000246A000-memory.dmp

    Filesize

    40KB