Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    21-11-2024 08:43

General

  • Target

    PanoramaStudio4Pro.exe

  • Size

    13.6MB

  • MD5

    691e2b86ee66a02d91724057eda6b9f5

  • SHA1

    23ceac6601eff4358505f703e8b556b0100c056c

  • SHA256

    4b48907e6171e0e2291a4fb95239ddcc398bac79872ef90f55b369b1f66cb7eb

  • SHA512

    433b4c9a12577c805840a785c2ed271496388afd6fa988b494ab9baa9c0d02d7bf59598f01881826892a7506172623c918e23b95fbe6dabaad4d0d3e1ff94532

  • SSDEEP

    196608:nEXQC/8jeN5ifIvdBXiU0JQaiYKaV/SWItmkh:Ac6XPX4QaiYKaV/SWItdh

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\PanoramaStudio4Pro.exe
    "C:\Users\Admin\AppData\Local\Temp\PanoramaStudio4Pro.exe"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2736

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2736-0-0x000007FEF58C0000-0x000007FEF5E13000-memory.dmp

    Filesize

    5.3MB

  • memory/2736-2-0x0000000000910000-0x0000000000911000-memory.dmp

    Filesize

    4KB

  • memory/2736-3-0x0000000000930000-0x0000000000940000-memory.dmp

    Filesize

    64KB

  • memory/2736-1-0x000000013FD90000-0x00000001413DC000-memory.dmp

    Filesize

    22.3MB

  • memory/2736-5-0x0000000001F80000-0x0000000001F8A000-memory.dmp

    Filesize

    40KB

  • memory/2736-4-0x0000000001F80000-0x0000000001F8A000-memory.dmp

    Filesize

    40KB

  • memory/2736-9-0x0000000000930000-0x0000000000940000-memory.dmp

    Filesize

    64KB

  • memory/2736-10-0x0000000001F80000-0x0000000001F8A000-memory.dmp

    Filesize

    40KB

  • memory/2736-11-0x0000000001F80000-0x0000000001F8A000-memory.dmp

    Filesize

    40KB