Analysis

  • max time kernel
    149s
  • max time network
    155s
  • platform
    windows11-21h2_x64
  • resource
    win11-20241007-en
  • resource tags

    arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    29-11-2024 08:48

General

  • Target

    ThemeSwitcher.exe

  • Size

    199KB

  • MD5

    af3b2ac4363d12af5d108073ae2cbc05

  • SHA1

    e32b6a6d85da6472cf43f7e5139dbc1a363d8dc5

  • SHA256

    de990e3984abe6029253e323f0b5d60b81d3d4f5392ba2768c264b2036466e44

  • SHA512

    1da349db0a1400e742391dfd01dd90891104f16f0592fa63b0dd0fc8d497c7f5d34b77165987015383d4a6045ea545552452cfb729418755a53ec4f1124ee68e

  • SSDEEP

    1536:W88XlnXgPINnObalaQ2djBZkv1duFnAXvt7M2OGiNyeIPcrqTWn5q112GLyG:W88xQPItMajgkvb0AXj5iNyPpT4bG2G

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\ThemeSwitcher.exe
    "C:\Users\Admin\AppData\Local\Temp\ThemeSwitcher.exe"
    1⤵
      PID:4580

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\Themes\Custom.theme

      Filesize

      1KB

      MD5

      138aec8421a680077f437b52b68e92e0

      SHA1

      5de46a5f53747e84e4a741d3a685642c0fd5c911

      SHA256

      7f4146d11b118ac61fce0f23d9b8e7bc0d49c509dbe70fa703d86bc9c5b72ebc

      SHA512

      11d87e989f2af2c99aef3e6022191161122c0c7394c699ce04350bef8608cf49b118589db5cf4d75eb7a5eeee9556782dc9432a0890cf4e53e485c5d8531eb5f

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\Themes\Custom.theme

      Filesize

      1KB

      MD5

      b264deaacbfcacebaa7993791bafb7fa

      SHA1

      22e11e044127c86cf189eaa1a2accfb69cfc09df

      SHA256

      eb4cd12a792e06160fe8f8db0e58070356bda820051ab3eaa62c056e4faf55a6

      SHA512

      81f107e8323d57ce3946b342307dc86b05ff3ffad514df0e11e00eb5229986b2df9d0781c6420b3da84ab05c94ceffc8f672377e7d1e0b5f6ef66af12e0e1049

    • C:\Users\Admin\AppData\Local\Microsoft\Windows\Themes\Custom.theme

      Filesize

      1KB

      MD5

      5e53216fe351e47b1e42a5b993e9cffd

      SHA1

      89865999cd3175542dd5b0c3b382d283cf5f6dc2

      SHA256

      306499e9d20226befd4ff48fe27ae704a3586f0c138fa5088850e7abc400d2ec

      SHA512

      5df18280a0da242b7b988f70ff6ff60522ef6c17b29cf1737f6e8438da9627ce7007151dc1d7d0584ec38f5b371ed5add7058a468ea31eea3ab282af0879d2c1

    • memory/4580-0-0x00007FFA9E893000-0x00007FFA9E895000-memory.dmp

      Filesize

      8KB

    • memory/4580-1-0x00000000001C0000-0x00000000001F6000-memory.dmp

      Filesize

      216KB

    • memory/4580-2-0x00007FFA9E890000-0x00007FFA9F352000-memory.dmp

      Filesize

      10.8MB

    • memory/4580-708-0x00007FFA9E890000-0x00007FFA9F352000-memory.dmp

      Filesize

      10.8MB

    • memory/4580-757-0x00007FFA9E893000-0x00007FFA9E895000-memory.dmp

      Filesize

      8KB

    • memory/4580-758-0x00007FFA9E890000-0x00007FFA9F352000-memory.dmp

      Filesize

      10.8MB