Analysis
-
max time kernel
140s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
23/05/2023, 19:27
Static task
static1
Behavioral task
behavioral1
Sample
4f0a6a414ac219bc0bc14af30e7e5b7facb8eaf398f28677473f0b096cbd0663.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
4f0a6a414ac219bc0bc14af30e7e5b7facb8eaf398f28677473f0b096cbd0663.exe
Resource
win10v2004-20230220-en
General
-
Target
4f0a6a414ac219bc0bc14af30e7e5b7facb8eaf398f28677473f0b096cbd0663.exe
-
Size
3.2MB
-
MD5
7a213eb6032f4fbabbb436165cc03cf0
-
SHA1
d2d22f3a7134f66667dc5405aa8d68e8473f2a25
-
SHA256
4f0a6a414ac219bc0bc14af30e7e5b7facb8eaf398f28677473f0b096cbd0663
-
SHA512
8dd46c16fa1d90bd7d1d1684daf5dda4ad84febe4b958a7720e202d215e9c801916fb6d20372437ec22911d054be80a525d7c2e79fc458c2cfdce0d0aa3a461c
-
SSDEEP
49152:iyhYrc5GllyvSBPaJwTUo94qO0I3VZ2fq5UtQIkjuWmHTZqc6rkRj4S2Fgkn:iyh34liShCAUbqKqfqEQhH8lbh2Fgkn
Malware Config
Signatures
-
Modifies Control Panel 8 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2548970870-3691742953-3895070203-1000\Control Panel\International\sTime = ":" 4f0a6a414ac219bc0bc14af30e7e5b7facb8eaf398f28677473f0b096cbd0663.exe Set value (str) \REGISTRY\USER\S-1-5-21-2548970870-3691742953-3895070203-1000\Control Panel\International\sShortDate = "yyyy-MM-dd" 4f0a6a414ac219bc0bc14af30e7e5b7facb8eaf398f28677473f0b096cbd0663.exe Set value (str) \REGISTRY\USER\S-1-5-21-2548970870-3691742953-3895070203-1000\Control Panel\International\iDate = "2" 4f0a6a414ac219bc0bc14af30e7e5b7facb8eaf398f28677473f0b096cbd0663.exe Set value (str) \REGISTRY\USER\S-1-5-21-2548970870-3691742953-3895070203-1000\Control Panel\International\sDate = "-" 4f0a6a414ac219bc0bc14af30e7e5b7facb8eaf398f28677473f0b096cbd0663.exe Set value (str) \REGISTRY\USER\S-1-5-21-2548970870-3691742953-3895070203-1000\Control Panel\International\sTimeFormat = "HH:mm:ss" 4f0a6a414ac219bc0bc14af30e7e5b7facb8eaf398f28677473f0b096cbd0663.exe Set value (str) \REGISTRY\USER\S-1-5-21-2548970870-3691742953-3895070203-1000\Control Panel\International\iTime = "1" 4f0a6a414ac219bc0bc14af30e7e5b7facb8eaf398f28677473f0b096cbd0663.exe Set value (str) \REGISTRY\USER\S-1-5-21-2548970870-3691742953-3895070203-1000\Control Panel\International\iTLZero = "1" 4f0a6a414ac219bc0bc14af30e7e5b7facb8eaf398f28677473f0b096cbd0663.exe Set value (str) \REGISTRY\USER\S-1-5-21-2548970870-3691742953-3895070203-1000\Control Panel\International\iTimePrefix = "0" 4f0a6a414ac219bc0bc14af30e7e5b7facb8eaf398f28677473f0b096cbd0663.exe