21b235af5aa65ba955ee34bee3197cc3769a1d3959fb154dd45b6de874d48e00

Analysis

max time kernel
30s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
14-06-2023 17:36

Target

Ship2005Group24.exe
Size

8.8MB
MD5

2ac946530a7de7c1a6ca87f57e9f2c87
SHA1

a67e78ad3e346e6d9a2a05ddd92ee21ea5e112f4
SHA256

21b235af5aa65ba955ee34bee3197cc3769a1d3959fb154dd45b6de874d48e00
SHA512

c70b4cab8257857c77dec7662028a22fa179dd4a497b3fed19e0c17d6680c40b16fbe67eac0813cd61079486f97338fc4bd40c14908275b9857a36ae324c689c
SSDEEP

196608:M1AKKmKRcWMS7+1yus+Y5wlvUyTbNDEBQnJM3WJgV8sXNoppVneAmKs:M19Km5SaHlxbNsQiGJQr4zeA

Score

1^/10

Modifies Control Panel 3 IoCs

evasion

Processes:

Ship2005Group24.exe

description	ioc	process
Set value (str)	\REGISTRY\USER\S-1-5-21-1914912747-3343861975-731272777-1000\Control Panel\International\sShortDate = "yyyy.MM.dd"	Ship2005Group24.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1914912747-3343861975-731272777-1000\Control Panel\International\iDate = "2"	Ship2005Group24.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1914912747-3343861975-731272777-1000\Control Panel\International\sDate = "."	Ship2005Group24.exe

C:\Users\Admin\AppData\Local\Temp\Ship2005Group24.exe
"C:\Users\Admin\AppData\Local\Temp\Ship2005Group24.exe"
1⤵
- Modifies Control Panel
PID:1636

memory/1636-54-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download
memory/1636-55-0x0000000000400000-0x0000000003732000-memory.dmp

Filesize
51.2MB

Download