Analysis
-
max time kernel
141s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
25-02-2023 20:59
Behavioral task
behavioral1
Sample
362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511.exe
Resource
win10v2004-20230220-en
General
-
Target
362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511.exe
-
Size
459KB
-
MD5
183cb55dc41b490199ab35b02cf3d6c9
-
SHA1
e2c0d7461ed0073330b81e0905b317452dae1c7a
-
SHA256
362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511
-
SHA512
d2a158253cb43e270bbec03cf7e9af8f85cc5909c43a55b528cab28a40bf031ee182898f3495acfa6543ebadd1ae8dfca4b214ecebb0b5c820901ab7c90b59f8
-
SSDEEP
6144:i/QHPC9Bu4S+OWwijxeQ4mSQCsroyhdV2MApr8cBydh1b3Ro:xvlWwi94XFsHd1cQcW1rRo
Malware Config
Signatures
-
Modifies Control Panel 9 IoCs
Processes:
362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511.exedescription ioc process Set value (str) \REGISTRY\USER\S-1-5-21-144354903-2550862337-1367551827-1000\Control Panel\International\sTime = ":" 362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511.exe Set value (str) \REGISTRY\USER\S-1-5-21-144354903-2550862337-1367551827-1000\Control Panel\International\iTime = "1" 362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511.exe Set value (str) \REGISTRY\USER\S-1-5-21-144354903-2550862337-1367551827-1000\Control Panel\International\iTLZero = "1" 362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511.exe Set value (str) \REGISTRY\USER\S-1-5-21-144354903-2550862337-1367551827-1000\Control Panel\International\iTimePrefix = "0" 362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511.exe Set value (str) \REGISTRY\USER\S-1-5-21-144354903-2550862337-1367551827-1000\Control Panel\International\sLongDate = "yyyy'Äê'MM'ÔÂ'dd'ÈÕ'" 362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511.exe Set value (str) \REGISTRY\USER\S-1-5-21-144354903-2550862337-1367551827-1000\Control Panel\International\sShortDate = "yyyy-MM-dd" 362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511.exe Set value (str) \REGISTRY\USER\S-1-5-21-144354903-2550862337-1367551827-1000\Control Panel\International\iDate = "2" 362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511.exe Set value (str) \REGISTRY\USER\S-1-5-21-144354903-2550862337-1367551827-1000\Control Panel\International\sDate = "-" 362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511.exe Set value (str) \REGISTRY\USER\S-1-5-21-144354903-2550862337-1367551827-1000\Control Panel\International\sTimeFormat = "HH:mm:ss" 362d23a6fd29dd8ead50b34c2ab40ad4280eca48fc73e5c8fb9fc02a41022511.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4752-133-0x0000000000400000-0x000000000054F000-memory.dmpFilesize
1.3MB
-
memory/4752-134-0x0000000000400000-0x000000000054F000-memory.dmpFilesize
1.3MB
-
memory/4752-135-0x0000000000400000-0x000000000054F000-memory.dmpFilesize
1.3MB
-
memory/4752-136-0x00000000006E0000-0x00000000006E1000-memory.dmpFilesize
4KB
-
memory/4752-137-0x0000000000400000-0x000000000054F000-memory.dmpFilesize
1.3MB