Analysis

  • max time kernel
    146s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    18-01-2025 08:18

General

  • Target

    AV MP3 Player-Morpher.exe

  • Size

    433KB

  • MD5

    57fe3645106cd88eba409cfc302a9dd6

  • SHA1

    06da7a86f9b1087bd5894f7d61bf92a256b28268

  • SHA256

    7247d0170e44761845d592539ce499dbf3136bfffd4956f4c6e28d8b8e8c6a9f

  • SHA512

    f7769111e45cdee5cca717f70a66e425d0f76c4178a3f27a10858d234d4dd768d64cc733fcee268742ddb38b35b754cb2412366f0066b255935c926157109fca

  • SSDEEP

    6144:X9Xdchs2vUcEcUyYn+ccks6d/W/FI0wbyO4ymX1iGGT/8KIwJtAzWecK19oPj:ZdUUc3ZYndP/W/FI0WGXgHLIw1e/9o7

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 3 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\AV MP3 Player-Morpher.exe
    "C:\Users\Admin\AppData\Local\Temp\AV MP3 Player-Morpher.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:2036

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\ProgramData\Avnex\AV MP3 Player-Morpher 4.0\Language.ini

    Filesize

    98B

    MD5

    a0900e88e7b6a8d2054b638426ca9533

    SHA1

    29eb0baa84449933dbec57c3657aa3906bfdc8c1

    SHA256

    b0f2ff41b36d0e1ab94d88a8d8d4bb185c100f1f7d69ae4cf12aa43adc328dbc

    SHA512

    653216462f4d7000deb136fefdc7aeca99139c8392870a6bb3d9d5500861097d7b8eb7560c5c3503b060c95747ca013a429e2f19bf66e8c7d9362e6407c88e1b

  • memory/2036-0-0x0000000000230000-0x0000000000248000-memory.dmp

    Filesize

    96KB

  • memory/2036-2-0x0000000000260000-0x000000000026E000-memory.dmp

    Filesize

    56KB

  • memory/2036-3-0x0000000000280000-0x0000000000299000-memory.dmp

    Filesize

    100KB

  • memory/2036-5-0x00000000002B0000-0x00000000002D0000-memory.dmp

    Filesize

    128KB

  • memory/2036-7-0x0000000000300000-0x000000000032B000-memory.dmp

    Filesize

    172KB

  • memory/2036-9-0x0000000000340000-0x0000000000355000-memory.dmp

    Filesize

    84KB

  • memory/2036-15-0x0000000002DB0000-0x0000000002DCB000-memory.dmp

    Filesize

    108KB

  • memory/2036-19-0x0000000002DB0000-0x0000000002DC1000-memory.dmp

    Filesize

    68KB

  • memory/2036-21-0x0000000002DB0000-0x0000000002DC5000-memory.dmp

    Filesize

    84KB

  • memory/2036-23-0x0000000002DB0000-0x0000000002DC3000-memory.dmp

    Filesize

    76KB

  • memory/2036-25-0x0000000002FD0000-0x0000000003022000-memory.dmp

    Filesize

    328KB

  • memory/2036-28-0x0000000002DB0000-0x0000000002DC2000-memory.dmp

    Filesize

    72KB

  • memory/2036-30-0x0000000002DB0000-0x0000000002DC3000-memory.dmp

    Filesize

    76KB

  • memory/2036-32-0x0000000002DB0000-0x0000000002DC5000-memory.dmp

    Filesize

    84KB

  • memory/2036-34-0x0000000002DB0000-0x0000000002DC2000-memory.dmp

    Filesize

    72KB

  • memory/2036-36-0x0000000002DB0000-0x0000000002DC3000-memory.dmp

    Filesize

    76KB

  • memory/2036-38-0x0000000002DB0000-0x0000000002DC3000-memory.dmp

    Filesize

    76KB

  • memory/2036-40-0x0000000002DB0000-0x0000000002DC8000-memory.dmp

    Filesize

    96KB

  • memory/2036-43-0x0000000002DB0000-0x0000000002DC4000-memory.dmp

    Filesize

    80KB

  • memory/2036-45-0x0000000002DB0000-0x0000000002DC2000-memory.dmp

    Filesize

    72KB

  • memory/2036-47-0x0000000002DB0000-0x0000000002DD9000-memory.dmp

    Filesize

    164KB

  • memory/2036-49-0x0000000002DB0000-0x0000000002DD2000-memory.dmp

    Filesize

    136KB

  • memory/2036-51-0x0000000002DB0000-0x0000000002DE0000-memory.dmp

    Filesize

    192KB

  • memory/2036-54-0x0000000002DB0000-0x0000000002DD1000-memory.dmp

    Filesize

    132KB

  • memory/2036-57-0x0000000002DB0000-0x0000000002DD1000-memory.dmp

    Filesize

    132KB

  • memory/2036-59-0x0000000002DB0000-0x0000000002DD6000-memory.dmp

    Filesize

    152KB

  • memory/2036-61-0x0000000002DB0000-0x0000000002DD2000-memory.dmp

    Filesize

    136KB

  • memory/2036-65-0x0000000002DD0000-0x0000000002DF9000-memory.dmp

    Filesize

    164KB

  • memory/2036-72-0x0000000002DD0000-0x0000000002DF1000-memory.dmp

    Filesize

    132KB

  • memory/2036-75-0x0000000002DD0000-0x0000000002DF1000-memory.dmp

    Filesize

    132KB

  • memory/2036-69-0x0000000002DD0000-0x0000000002E00000-memory.dmp

    Filesize

    192KB

  • memory/2036-67-0x0000000002DD0000-0x0000000002DF2000-memory.dmp

    Filesize

    136KB

  • memory/2036-110-0x0000000002DD0000-0x0000000002DE2000-memory.dmp

    Filesize

    72KB

  • memory/2036-108-0x0000000002DD0000-0x0000000002DE4000-memory.dmp

    Filesize

    80KB

  • memory/2036-105-0x0000000002DD0000-0x0000000002DE8000-memory.dmp

    Filesize

    96KB

  • memory/2036-103-0x0000000002DD0000-0x0000000002DE3000-memory.dmp

    Filesize

    76KB

  • memory/2036-101-0x0000000002DD0000-0x0000000002DE3000-memory.dmp

    Filesize

    76KB

  • memory/2036-99-0x0000000002DD0000-0x0000000002DE2000-memory.dmp

    Filesize

    72KB

  • memory/2036-97-0x0000000002DD0000-0x0000000002DE5000-memory.dmp

    Filesize

    84KB

  • memory/2036-95-0x0000000002DD0000-0x0000000002DE3000-memory.dmp

    Filesize

    76KB

  • memory/2036-93-0x0000000002DD0000-0x0000000002DE2000-memory.dmp

    Filesize

    72KB

  • memory/2036-90-0x00000000030B0000-0x0000000003102000-memory.dmp

    Filesize

    328KB

  • memory/2036-88-0x0000000002DD0000-0x0000000002DE3000-memory.dmp

    Filesize

    76KB

  • memory/2036-86-0x0000000002DD0000-0x0000000002DE5000-memory.dmp

    Filesize

    84KB

  • memory/2036-84-0x0000000002DD0000-0x0000000002DE1000-memory.dmp

    Filesize

    68KB

  • memory/2036-81-0x0000000002DD0000-0x0000000002DEB000-memory.dmp

    Filesize

    108KB

  • memory/2036-79-0x0000000002DD0000-0x0000000002DF2000-memory.dmp

    Filesize

    136KB

  • memory/2036-77-0x0000000002DD0000-0x0000000002DF6000-memory.dmp

    Filesize

    152KB

  • memory/2036-114-0x0000000007A60000-0x0000000007F2E000-memory.dmp

    Filesize

    4.8MB