3cd91f5b67da131f0c776a1fc09ad93c234778a82cbf6666fd3621d9ef014439

Analysis

max time kernel
31s
max time network
34s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
14-06-2023 12:35

Target

Ship2005Group8.exe
Size

8.7MB
MD5

6b2b99e995da447d50fdf0228227f77b
SHA1

4ee0c4b9d7dc8ac6491d3047d3f6583d3f1a01d7
SHA256

3cd91f5b67da131f0c776a1fc09ad93c234778a82cbf6666fd3621d9ef014439
SHA512

7495f67316f180fd777abdf29bdad9565b56396aa95eb5f6bb54b2b59b2c912aa90878a5ba526099f1964079704e9af86d1855dbe45f85d21674ec94da999446
SSDEEP

196608:TzWZqgd0UJnCvmanPSkPfRVvpVufuzoSC6yFoqnLcIP8ecAIS0v7:eZqnUJwnnVvpYuESC6EXnLc1eLN0v

Score

1^/10

Modifies Control Panel 3 IoCs

evasion

Processes:

Ship2005Group8.exe

description	ioc	process
Set value (str)	\REGISTRY\USER\S-1-5-21-3948302646-268491222-1934009652-1000\Control Panel\International\sShortDate = "yyyy.MM.dd"	Ship2005Group8.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3948302646-268491222-1934009652-1000\Control Panel\International\iDate = "2"	Ship2005Group8.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3948302646-268491222-1934009652-1000\Control Panel\International\sDate = "."	Ship2005Group8.exe

C:\Users\Admin\AppData\Local\Temp\Ship2005Group8.exe
"C:\Users\Admin\AppData\Local\Temp\Ship2005Group8.exe"
1⤵
- Modifies Control Panel
PID:1380

memory/1380-54-0x00000000001C0000-0x00000000001C1000-memory.dmp

Filesize
4KB

Download
memory/1380-55-0x0000000000400000-0x00000000036EA000-memory.dmp

Filesize
50.9MB

Download