Analysis

  • max time kernel
    595s
  • max time network
    444s
  • platform
    windows11-21h2_x64
  • resource
    win11-20241007-en
  • resource tags

    arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    25-01-2025 10:42

General

  • Target

    lossless scaling/Registration ('Crack')/Data/uk-UA/LosslessScaling.exe

  • Size

    953KB

  • MD5

    2c98d33096e97094cbbbd19f27f40883

  • SHA1

    7e28af9d119d2658f962e3b28140c6081be1612b

  • SHA256

    010ac1120a88a772e87d9e9018aa5db034a9bac9399803d4a7c4db3c47a71df6

  • SHA512

    f9070ad6b2e3295fdde13aa8d7486147a7f9a675a924ad3bf117479baf5b573cf92650199e58378dd8345a28ab890bbd5021d374030c24836bfa65bb037dddc7

  • SSDEEP

    12288:ApDJEDS4MCLSyf6mOuGyW38yHJc+CKtOaO5Z7WhawnzE4ZbuRCwmhI2J+0sDgwl1:btMCLPf1Oi32OvzGo4ZiRlT/sN0

Score
1/10

Malware Config

Signatures

  • Modifies Control Panel 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\lossless scaling\Registration ('Crack')\Data\uk-UA\LosslessScaling.exe
    "C:\Users\Admin\AppData\Local\Temp\lossless scaling\Registration ('Crack')\Data\uk-UA\LosslessScaling.exe"
    1⤵
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:2844

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Lossless Scaling\Settings.xml

    Filesize

    2KB

    MD5

    45fed0a3bcbc889ca99d0c5943210e7e

    SHA1

    602584366a413cb9ae459b6c3231190cd787241e

    SHA256

    9812fe8104a86e693d6baa02a4cdb56ea9a4aedb500b050346eb5ec6bda8dd09

    SHA512

    d0728fcce9484daedb2c9552ee2a818f7cccbeb1e9bca24a1c4fc1ca6e8c181c46cdc89670bfee3d6ad219ea6f69750bd03f776af4f9e4667872c66c11dbd255

  • memory/2844-13-0x00000184E6250000-0x00000184E6258000-memory.dmp

    Filesize

    32KB

  • memory/2844-38-0x00007FFE8EB80000-0x00007FFE8F642000-memory.dmp

    Filesize

    10.8MB

  • memory/2844-3-0x00000184E37E0000-0x00000184E3806000-memory.dmp

    Filesize

    152KB

  • memory/2844-4-0x00000184E3630000-0x00000184E3638000-memory.dmp

    Filesize

    32KB

  • memory/2844-5-0x00000184E3640000-0x00000184E364A000-memory.dmp

    Filesize

    40KB

  • memory/2844-6-0x00007FFE8EB80000-0x00007FFE8F642000-memory.dmp

    Filesize

    10.8MB

  • memory/2844-7-0x00007FFE8EB80000-0x00007FFE8F642000-memory.dmp

    Filesize

    10.8MB

  • memory/2844-9-0x00000184E5E20000-0x00000184E5ED2000-memory.dmp

    Filesize

    712KB

  • memory/2844-10-0x00007FFE8EB80000-0x00007FFE8F642000-memory.dmp

    Filesize

    10.8MB

  • memory/2844-11-0x00000184E5F90000-0x00000184E604A000-memory.dmp

    Filesize

    744KB

  • memory/2844-40-0x00007FFE8EB80000-0x00007FFE8F642000-memory.dmp

    Filesize

    10.8MB

  • memory/2844-2-0x00000184E36E0000-0x00000184E37C6000-memory.dmp

    Filesize

    920KB

  • memory/2844-1-0x00000184C8FF0000-0x00000184C90E4000-memory.dmp

    Filesize

    976KB

  • memory/2844-16-0x00000184E6270000-0x00000184E627E000-memory.dmp

    Filesize

    56KB

  • memory/2844-14-0x00007FFE8EB80000-0x00007FFE8F642000-memory.dmp

    Filesize

    10.8MB

  • memory/2844-32-0x00007FFE8EB83000-0x00007FFE8EB85000-memory.dmp

    Filesize

    8KB

  • memory/2844-33-0x00007FFE8EB80000-0x00007FFE8F642000-memory.dmp

    Filesize

    10.8MB

  • memory/2844-34-0x00007FFE8EB80000-0x00007FFE8F642000-memory.dmp

    Filesize

    10.8MB

  • memory/2844-35-0x00007FFE8EB80000-0x00007FFE8F642000-memory.dmp

    Filesize

    10.8MB

  • memory/2844-36-0x00007FFE8EB80000-0x00007FFE8F642000-memory.dmp

    Filesize

    10.8MB

  • memory/2844-37-0x00007FFE8EB80000-0x00007FFE8F642000-memory.dmp

    Filesize

    10.8MB

  • memory/2844-0-0x00007FFE8EB83000-0x00007FFE8EB85000-memory.dmp

    Filesize

    8KB

  • memory/2844-39-0x00007FFE8EB80000-0x00007FFE8F642000-memory.dmp

    Filesize

    10.8MB

  • memory/2844-12-0x00000184E5ED0000-0x00000184E5F08000-memory.dmp

    Filesize

    224KB