93d51be2e543663e25aded1fb1b9550d320100f43fbc6c4717e77139f22c7a87 | Triage

Analysis

max time kernel
27s
max time network
30s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
14-06-2023 18:32

Sharing

Report Analysis Logs

General

Target

Ship2005Group18.exe
Size

8.7MB
MD5

49c24f4cbb239fa1584026fd634bc6f9
SHA1

d1c3994a44ff96f5a0ba61674ad10db03b475b75
SHA256

93d51be2e543663e25aded1fb1b9550d320100f43fbc6c4717e77139f22c7a87
SHA512

60ce1bed0385515834d3343eb7ea1cd1acd31f9a62e507795ead95672c4e4421a1d617536b4bc1e687bed3d9819ec4657eda1463ccdd28418a7dd6f42082cffc
SSDEEP

196608:9ctwyDOftmGvxuVqfeJQ3p6bicoBKrK4cWRfksR/L9j7:WPDOftFvxVrCiWK4DNkM

Score

1^/10

Malware Config

Signatures

Modifies Control Panel 3 IoCs

Processes:

Ship2005Group18.exe

description	ioc	process
Set value (str)	\REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000\Control Panel\International\iDate = "2"	Ship2005Group18.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000\Control Panel\International\sDate = "."	Ship2005Group18.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3430344531-3702557399-3004411149-1000\Control Panel\International\sShortDate = "yyyy.MM.dd"	Ship2005Group18.exe

C:\Users\Admin\AppData\Local\Temp\Ship2005Group18.exe
"C:\Users\Admin\AppData\Local\Temp\Ship2005Group18.exe"
1⤵
- Modifies Control Panel
PID:284

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/284-54-0x00000000002B0000-0x00000000002B1000-memory.dmp

Filesize
4KB

Download
memory/284-55-0x0000000000400000-0x0000000003708000-memory.dmp

Filesize
51.0MB

Download