Analysis
-
max time kernel
179s -
max time network
178s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
20-05-2022 23:17
Static task
static1
Behavioral task
behavioral1
Sample
Ziraat Bankasi Swift.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Ziraat Bankasi Swift.exe
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
General
-
Target
Ziraat Bankasi Swift.exe
-
Size
676KB
-
MD5
dc0c0581231219dbd8c51210499ed5f4
-
SHA1
0f185c40acced956c10fbad1ee52950b72618db8
-
SHA256
1807db4729b2057e9e43ceefc3502ebd7a988e248ede3c56d85f7f5befdafd06
-
SHA512
5bcc5849043c7d4b316a621018705cc20f920e0e92ebe3a96f4b997aa2b3fd2f1f2e4796b69737ca5696060f6adbb0ab492be3e66fc0e7a4d5b15cac2e2e8aea
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 8 IoCs
Processes:
Ziraat Bankasi Swift.exepid process 3112 Ziraat Bankasi Swift.exe 3112 Ziraat Bankasi Swift.exe 3112 Ziraat Bankasi Swift.exe 3112 Ziraat Bankasi Swift.exe 3112 Ziraat Bankasi Swift.exe 3112 Ziraat Bankasi Swift.exe 3112 Ziraat Bankasi Swift.exe 3112 Ziraat Bankasi Swift.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
Ziraat Bankasi Swift.exedescription pid process Token: SeDebugPrivilege 3112 Ziraat Bankasi Swift.exe