Analysis
-
max time kernel
34s -
max time network
25s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
19-01-2025 16:28
General
-
Target
RayzMod V3/Extreme.Net.dll
-
Size
163KB
-
MD5
b501745a68ce3aeb82135264d3eab64e
-
SHA1
019aa9833669ea1135cf20c075d82e45806f1c3e
-
SHA256
b6ec30050b06fe9a133d6a3d3c8a2c69046fb9037a16c761a1cff8cc65d5c0b1
-
SHA512
d5e7f597622a67806a673fd16a91125ab21155648c65d00c4e4f2d0cddaa62015fa27adacd1b04990814abb7a2732a8bf4c8aa9971ccda498972327d2fad6576
-
SSDEEP
3072:Tveb5wQUp+tZWiO2Gg7EZ8StYmijRAaCeu9CMR:CuQUp+tZWiO2G4VStpijm
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of FindShellTrayWindow 9 IoCs
-
Suspicious use of SendNotifyMessage 8 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\RayzMod V3\Extreme.Net.dll",#11⤵
-
C:\Windows\explorer.exe"C:\Windows\explorer.exe"1⤵
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Downloads\ClearGrant.asx"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
208KB
-
Filesize
992KB
-
Filesize
2.7MB
-
Filesize
1.1MB
-
Filesize
16.7MB