Analysis
-
max time kernel
42s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
07-06-2023 19:57
Behavioral task
behavioral1
Sample
5ea6390367738e509aa88737c83d7ca74fc6d5e85c08b7a7d213a8ffef21b54c.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
5ea6390367738e509aa88737c83d7ca74fc6d5e85c08b7a7d213a8ffef21b54c.exe
Resource
win10v2004-20230220-en
General
-
Target
5ea6390367738e509aa88737c83d7ca74fc6d5e85c08b7a7d213a8ffef21b54c.exe
-
Size
912KB
-
MD5
408aa412d710598d40b4551db5ec82b0
-
SHA1
8c4b52fa5be7586f3db9dc72f460aa4b5675ed62
-
SHA256
5ea6390367738e509aa88737c83d7ca74fc6d5e85c08b7a7d213a8ffef21b54c
-
SHA512
b23f1a7b9af8c40198984139f63f6609e086bf95baeefe79e9c4155de4d6bdc8f06f7ca49ac3824053fd39ccc316971286fbffee9fdb452e262841f9d4b81467
-
SSDEEP
24576:wc9hPf6+qrdQ3cbZHJhHAagWjNmcJm3tzawh:LqKctppKWY3F
Malware Config
Signatures
-
Modifies Control Panel 3 IoCs
Processes:
5ea6390367738e509aa88737c83d7ca74fc6d5e85c08b7a7d213a8ffef21b54c.exedescription ioc process Set value (str) \REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000\Control Panel\International\sShortDate = "yyyy-MM-dd" 5ea6390367738e509aa88737c83d7ca74fc6d5e85c08b7a7d213a8ffef21b54c.exe Set value (str) \REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000\Control Panel\International\iDate = "2" 5ea6390367738e509aa88737c83d7ca74fc6d5e85c08b7a7d213a8ffef21b54c.exe Set value (str) \REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000\Control Panel\International\sDate = "-" 5ea6390367738e509aa88737c83d7ca74fc6d5e85c08b7a7d213a8ffef21b54c.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2024-56-0x0000000000400000-0x000000000070C000-memory.dmpFilesize
3.0MB
-
memory/2024-55-0x0000000000400000-0x000000000070C000-memory.dmpFilesize
3.0MB
-
memory/2024-54-0x0000000000400000-0x000000000070C000-memory.dmpFilesize
3.0MB
-
memory/2024-57-0x0000000000400000-0x000000000070C000-memory.dmpFilesize
3.0MB
-
memory/2024-58-0x0000000000380000-0x0000000000381000-memory.dmpFilesize
4KB
-
memory/2024-59-0x0000000000400000-0x000000000070C000-memory.dmpFilesize
3.0MB
-
memory/2024-61-0x0000000000400000-0x000000000070C000-memory.dmpFilesize
3.0MB
-
memory/2024-63-0x0000000000400000-0x000000000070C000-memory.dmpFilesize
3.0MB