806df5636f9f13f192387bd866f0816e22b10c7df0f01e0e9b11c4a2f0b3d013

Analysis

max time kernel
144s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
14-06-2023 18:37

Target

Ship200520200327.exe
Size

9.0MB
MD5

d5c1e78887a740bc6bd93cbec8348dae
SHA1

2557aac3d16a9fc3554712b9d723d8cb227af222
SHA256

806df5636f9f13f192387bd866f0816e22b10c7df0f01e0e9b11c4a2f0b3d013
SHA512

030b2e8c5b3c29579e72393fe6c9e3429e416ca66522b14b5237d886f71a37f508845595260784b55e93dae1e57fbf88e086146a1f22fdfb05d5519913df0274
SSDEEP

196608:QG56LJjQ+OPVUWzoRvIRX9kHT1h2/gyRarocluZTEVK/b+K5w+1Y+vySbg:QG56LpzdI+D2tRa8ZwVKRjYc2

Score

1^/10

Modifies Control Panel 3 IoCs

evasion

Processes:

Ship200520200327.exe

description	ioc	process
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Control Panel\International\sShortDate = "yyyy.MM.dd"	Ship200520200327.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Control Panel\International\iDate = "2"	Ship200520200327.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Control Panel\International\sDate = "."	Ship200520200327.exe

C:\Users\Admin\AppData\Local\Temp\Ship200520200327.exe
"C:\Users\Admin\AppData\Local\Temp\Ship200520200327.exe"
1⤵
- Modifies Control Panel
PID:1900

memory/1900-133-0x00000000057D0000-0x00000000057D1000-memory.dmp

Filesize
4KB

Download
memory/1900-134-0x0000000000400000-0x00000000038E4000-memory.dmp

Filesize
52.9MB

Download