Overview
overview
3Static
static
1Greenshot.exe
windows7-x64
1Greenshot.exe
windows10-2004-x64
1Greenshot.exe.xml
windows7-x64
1Greenshot.exe.xml
windows10-2004-x64
1Greenshot.ini
windows7-x64
1Greenshot.ini
windows10-2004-x64
1GreenshotPlugin.dll
windows7-x64
1GreenshotPlugin.dll
windows10-2004-x64
1LinqBridge.dll
windows7-x64
1LinqBridge.dll
windows10-2004-x64
1Plugins/Gr...in.dll
windows7-x64
1Plugins/Gr...in.dll
windows10-2004-x64
1checksum.md5
windows7-x64
3checksum.md5
windows10-2004-x64
3log4net.dll
windows7-x64
1log4net.dll
windows10-2004-x64
1Analysis
-
max time kernel
70s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
12-03-2023 03:14
Static task
static1
Behavioral task
behavioral1
Sample
Greenshot.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Greenshot.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
Greenshot.exe.xml
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
Greenshot.exe.xml
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
Greenshot.ini
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
Greenshot.ini
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
GreenshotPlugin.dll
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
GreenshotPlugin.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
LinqBridge.dll
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
LinqBridge.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
Plugins/GreenshotImgurPlugin/GreenshotImgurPlugin.dll
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
Plugins/GreenshotImgurPlugin/GreenshotImgurPlugin.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
checksum.md5
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
checksum.md5
Resource
win10v2004-20230221-en
Behavioral task
behavioral15
Sample
log4net.dll
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
log4net.dll
Resource
win10v2004-20230220-en
General
-
Target
Greenshot.exe
-
Size
515KB
-
MD5
346d22939e3079901f0dfac7add71c94
-
SHA1
67ea9f4f56c7c4189745aab05c614a6e615d9e7e
-
SHA256
fdc3900da9cf5b4b7f4b461eb54f2f7abf2af104de8bfdd0b7f6a46f092f9cc6
-
SHA512
3d845aee807f6fc711f212229595ba2dfeec760c649b7b0f4398cba8091fab8eb63dd551b46f49840a2de2c2b872130b4b5e90f95ff2757381e96be4b066122d
-
SSDEEP
12288:qIska30pZKIpno9eKXt2w3Po52QIUtMbYKUnwLu8m3mkDGYP8/Gc5oTr6zG/P9PI:YxUR5LgcOoINdSjQk2
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1968 Greenshot.exe -
Suspicious use of FindShellTrayWindow 6 IoCs
pid Process 1968 Greenshot.exe 1968 Greenshot.exe 1968 Greenshot.exe 1968 Greenshot.exe 1968 Greenshot.exe 1968 Greenshot.exe -
Suspicious use of SendNotifyMessage 6 IoCs
pid Process 1968 Greenshot.exe 1968 Greenshot.exe 1968 Greenshot.exe 1968 Greenshot.exe 1968 Greenshot.exe 1968 Greenshot.exe