Overview
overview
3Static
static
3Android.Im...32.zip
windows7-x64
1Android.Im...32.zip
windows10-2004-x64
1Android Im...ck.exe
windows7-x64
1Android Im...ck.exe
windows10-2004-x64
1Android Im...ck.exe
windows7-x64
1Android Im...ck.exe
windows10-2004-x64
1Android Im...er.jar
windows7-x64
1Android Im...er.jar
windows10-2004-x64
1Android Im...p2.exe
windows7-x64
1Android Im...p2.exe
windows10-2004-x64
1Android Im...at.exe
windows7-x64
1Android Im...at.exe
windows10-2004-x64
1Android Im...od.exe
windows7-x64
1Android Im...od.exe
windows10-2004-x64
1Android Im.../empty
windows7-x64
1Android Im.../empty
windows10-2004-x64
1Android Im...yblock
windows7-x64
3Android Im...yblock
windows10-2004-x64
3Android Im...bprivk
windows7-x64
3Android Im...bprivk
windows10-2004-x64
3Android Im...io.exe
windows7-x64
1Android Im...io.exe
windows10-2004-x64
1Android Im...ut.exe
windows7-x64
1Android Im...ut.exe
windows10-2004-x64
1Android Im...-1.dll
windows7-x64
1Android Im...-1.dll
windows10-2004-x64
1Android Im....1.dll
windows7-x64
1Android Im....1.dll
windows10-2004-x64
1Android Im...-1.dll
windows7-x64
1Android Im...-1.dll
windows10-2004-x64
1Android Im...-2.dll
windows7-x64
1Android Im...-2.dll
windows10-2004-x64
1Analysis
-
max time kernel
30s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
09-05-2023 00:39
Static task
static1
Behavioral task
behavioral1
Sample
Android.Image.Kitchen.v3.8-Win32.zip
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Android.Image.Kitchen.v3.8-Win32.zip
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
Android Image Kitchen/android_win_tools/blobpack.exe
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
Android Image Kitchen/android_win_tools/blobpack.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
Android Image Kitchen/android_win_tools/blobunpack.exe
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
Android Image Kitchen/android_win_tools/blobunpack.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
Android Image Kitchen/android_win_tools/boot_signer.jar
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
Android Image Kitchen/android_win_tools/boot_signer.jar
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
Android Image Kitchen/android_win_tools/bzip2.exe
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
Android Image Kitchen/android_win_tools/bzip2.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
Android Image Kitchen/android_win_tools/cat.exe
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
Android Image Kitchen/android_win_tools/cat.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
Android Image Kitchen/android_win_tools/chmod.exe
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
Android Image Kitchen/android_win_tools/chmod.exe
Resource
win10v2004-20230221-en
Behavioral task
behavioral15
Sample
Android Image Kitchen/android_win_tools/chromeos/empty
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
Android Image Kitchen/android_win_tools/chromeos/empty
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
Android Image Kitchen/android_win_tools/chromeos/kernel.keyblock
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
Android Image Kitchen/android_win_tools/chromeos/kernel.keyblock
Resource
win10v2004-20230220-en
Behavioral task
behavioral19
Sample
Android Image Kitchen/android_win_tools/chromeos/kernel_data_key.vbprivk
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
Android Image Kitchen/android_win_tools/chromeos/kernel_data_key.vbprivk
Resource
win10v2004-20230220-en
Behavioral task
behavioral21
Sample
Android Image Kitchen/android_win_tools/cpio.exe
Resource
win7-20230220-en
Behavioral task
behavioral22
Sample
Android Image Kitchen/android_win_tools/cpio.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral23
Sample
Android Image Kitchen/android_win_tools/cut.exe
Resource
win7-20230220-en
Behavioral task
behavioral24
Sample
Android Image Kitchen/android_win_tools/cut.exe
Resource
win10v2004-20230221-en
Behavioral task
behavioral25
Sample
Android Image Kitchen/android_win_tools/cygbz2-1.dll
Resource
win7-20230220-en
Behavioral task
behavioral26
Sample
Android Image Kitchen/android_win_tools/cygbz2-1.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral27
Sample
Android Image Kitchen/android_win_tools/cygcrypto-1.1.dll
Resource
win7-20230220-en
Behavioral task
behavioral28
Sample
Android Image Kitchen/android_win_tools/cygcrypto-1.1.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral29
Sample
Android Image Kitchen/android_win_tools/cyggcc_s-1.dll
Resource
win7-20230220-en
Behavioral task
behavioral30
Sample
Android Image Kitchen/android_win_tools/cyggcc_s-1.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral31
Sample
Android Image Kitchen/android_win_tools/cygiconv-2.dll
Resource
win7-20230220-en
Behavioral task
behavioral32
Sample
Android Image Kitchen/android_win_tools/cygiconv-2.dll
Resource
win10v2004-20230220-en
General
-
Target
Android Image Kitchen/android_win_tools/bzip2.exe
-
Size
32KB
-
MD5
a0709717a152cf036fea3a0b457c82e7
-
SHA1
0199d5cdc1da50529f0a328b5f92776e776bcc8d
-
SHA256
2c55ea49d340138e8d04680ff4489c59c1fa9999d708db43765df8f395d288ef
-
SHA512
d457caf993a9237911d880a8900c4f5feee40f03f934e33ff5dd0e964a3b0a78d0d5023c2c16d8eb45b3ba058e170adfca9b3b41f5c6aa196865dcf9260a856c
-
SSDEEP
768:x3kp8UacStKv/TdUTHoJXh8SezY6ss6666666666sW74B9YwWq:VkKUaPtCZU4tiYdWq
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
Processes:
bzip2.exedescription pid process Token: SeRestorePrivilege 1952 bzip2.exe Token: SeBackupPrivilege 1952 bzip2.exe Token: SeDebugPrivilege 1952 bzip2.exe