362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511

Analysis

max time kernel
141s
max time network
32s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
25-02-2023 20:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511.exe
Size

459KB
MD5

183cb55dc41b490199ab35b02cf3d6c9
SHA1

e2c0d7461ed0073330b81e0905b317452dae1c7a
SHA256

362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511
SHA512

d2a158253cb43e270bbec03cf7e9af8f85cc5909c43a55b528cab28a40bf031ee182898f3495acfa6543ebadd1ae8dfca4b214ecebb0b5c820901ab7c90b59f8
SSDEEP

6144:i/QHPC9Bu4S+OWwijxeQ4mSQCsroyhdV2MApr8cBydh1b3Ro:xvlWwi94XFsHd1cQcW1rRo

Score

1^/10

Malware Config

Signatures

Modifies Control Panel 9 IoCs

evasion

Processes:

362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511.exe

description	ioc	process
Set value (str)	\REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000\Control Panel\International\sShortDate = "yyyy-MM-dd"	362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000\Control Panel\International\iTime = "1"	362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000\Control Panel\International\iTLZero = "1"	362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000\Control Panel\International\iTimePrefix = "0"	362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000\Control Panel\International\sTime = ":"	362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000\Control Panel\International\iDate = "2"	362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000\Control Panel\International\sDate = "-"	362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000\Control Panel\International\sTimeFormat = "HH:mm:ss"	362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000\Control Panel\International\sLongDate = "yyyy'Äê'MM'ÔÂ'dd'ÈÕ'"	362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511.exe

C:\Users\Admin\AppData\Local\Temp\362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511.exe
"C:\Users\Admin\AppData\Local\Temp\362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511.exe"
1⤵
- Modifies Control Panel
PID:1980

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1980-55-0x0000000000400000-0x000000000054F000-memory.dmp

Filesize
1.3MB

Download
memory/1980-54-0x0000000000400000-0x000000000054F000-memory.dmp

Filesize
1.3MB

Download
memory/1980-56-0x0000000000400000-0x000000000054F000-memory.dmp

Filesize
1.3MB

Download
memory/1980-57-0x00000000001B0000-0x00000000001B1000-memory.dmp

Filesize
4KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads