Analysis
-
max time kernel
105s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
14-06-2023 17:36
Behavioral task
behavioral1
Sample
Ship2005Group24.exe
Resource
win7-20230220-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Ship2005Group24.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
Ship2005Group24.exe
-
Size
8.8MB
-
MD5
2ac946530a7de7c1a6ca87f57e9f2c87
-
SHA1
a67e78ad3e346e6d9a2a05ddd92ee21ea5e112f4
-
SHA256
21b235af5aa65ba955ee34bee3197cc3769a1d3959fb154dd45b6de874d48e00
-
SHA512
c70b4cab8257857c77dec7662028a22fa179dd4a497b3fed19e0c17d6680c40b16fbe67eac0813cd61079486f97338fc4bd40c14908275b9857a36ae324c689c
-
SSDEEP
196608:M1AKKmKRcWMS7+1yus+Y5wlvUyTbNDEBQnJM3WJgV8sXNoppVneAmKs:M19Km5SaHlxbNsQiGJQr4zeA
Score
1/10
Malware Config
Signatures
-
Modifies Control Panel 3 IoCs
Processes:
Ship2005Group24.exedescription ioc process Set value (str) \REGISTRY\USER\S-1-5-21-2548970870-3691742953-3895070203-1000\Control Panel\International\iDate = "2" Ship2005Group24.exe Set value (str) \REGISTRY\USER\S-1-5-21-2548970870-3691742953-3895070203-1000\Control Panel\International\sDate = "." Ship2005Group24.exe Set value (str) \REGISTRY\USER\S-1-5-21-2548970870-3691742953-3895070203-1000\Control Panel\International\sShortDate = "yyyy.MM.dd" Ship2005Group24.exe