Resubmissions
06/06/2023, 21:56
230606-1ts5lsgd7w 806/06/2023, 21:56
230606-1tcsmafg88 706/06/2023, 21:54
230606-1sgp7afg86 7Analysis
-
max time kernel
21s -
max time network
24s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system -
submitted
06/06/2023, 21:56
Behavioral task
behavioral1
Sample
PrimalClient-V2_FREE_FIX.exe
Resource
win10v2004-20230221-en
1 signatures
150 seconds
General
-
Target
PrimalClient-V2_FREE_FIX.exe
-
Size
4.4MB
-
MD5
113f2d267a119e6ed76b865c14e10908
-
SHA1
59a548e235a5d4f5ace62673659ad18e85cbe8fd
-
SHA256
9eb0e6014c8aa7f8222b3b5959648bb1addaf00ac873ae253d62ba57dca0b473
-
SHA512
e2ef9ff60e2b4c502310e0a81ff8673f2bd7fecce38687c1a9f1e60170e8cbf9bab7615a89455b685a1df310e95b15041b38b37072129d5c0f47b4409917001a
-
SSDEEP
98304:i0x63CAXVQvgRJRE/jU59A5Lg4r2t1ehkLa3dhkiDFmL43mhYE1d8:i0xQCU3ROVrUeh/FDt2aEQ
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/4840-133-0x00007FF7460D0000-0x00007FF746C0D000-memory.dmp themida
Processes
-
C:\Users\Admin\AppData\Local\Temp\PrimalClient-V2_FREE_FIX.exe"C:\Users\Admin\AppData\Local\Temp\PrimalClient-V2_FREE_FIX.exe"1⤵PID:4840
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:1992
-
C:\Users\Admin\AppData\Local\Temp\PrimalClient-V2_FREE_FIX.exe"C:\Users\Admin\AppData\Local\Temp\PrimalClient-V2_FREE_FIX.exe"1⤵PID:3384