Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    21/11/2024, 07:28

General

  • Target

    PanoramaStudio4Pro.exe

  • Size

    13.6MB

  • MD5

    c5729d836ed9f9cb0703c856432ad358

  • SHA1

    0440101321f5f61f6fd67c4f5030235874ab1db1

  • SHA256

    67072e2607cfa8dfe7b03a3160777cc5c09eb9d48bb19cc9fbc08dd4958c8b60

  • SHA512

    b32a696cdf637372f5bf901396cf4b005a05a437caf537ea38f92ad698724c03045119e3c2022fc2738c8c8ccbc31ee8c9b322ac77b394c54a67127b820c0e85

  • SSDEEP

    196608:EEwQC/8jeN5BRIvdBXiUpBIaiYKaV/SWItmkH:0c6GPXXIaiYKaV/SWItdH

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\PanoramaStudio4Pro.exe
    "C:\Users\Admin\AppData\Local\Temp\PanoramaStudio4Pro.exe"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2120

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2120-0-0x000007FEF6BB0000-0x000007FEF7103000-memory.dmp

    Filesize

    5.3MB

  • memory/2120-3-0x00000000005A0000-0x00000000005B0000-memory.dmp

    Filesize

    64KB

  • memory/2120-1-0x000000013F7A0000-0x0000000140DEC000-memory.dmp

    Filesize

    22.3MB

  • memory/2120-2-0x0000000000580000-0x0000000000581000-memory.dmp

    Filesize

    4KB

  • memory/2120-5-0x0000000001F80000-0x0000000001F8A000-memory.dmp

    Filesize

    40KB

  • memory/2120-4-0x0000000001F80000-0x0000000001F8A000-memory.dmp

    Filesize

    40KB

  • memory/2120-9-0x00000000005A0000-0x00000000005B0000-memory.dmp

    Filesize

    64KB

  • memory/2120-10-0x0000000001F80000-0x0000000001F8A000-memory.dmp

    Filesize

    40KB

  • memory/2120-11-0x0000000001F80000-0x0000000001F8A000-memory.dmp

    Filesize

    40KB