a06e890ab96f2e329ec024c3487af60ff26f9deb0a534b8fbb58e1172b120498

Analysis

max time kernel
29s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
14-06-2023 19:04

Target

Ship2005Group21.exe
Size

8.8MB
MD5

34de9156c0cf7e27417196b20a2ec94b
SHA1

fcade0ef30e2644aa63dba594c6420fafe8d08c6
SHA256

a06e890ab96f2e329ec024c3487af60ff26f9deb0a534b8fbb58e1172b120498
SHA512

95b4afc3f47d7a1a96ec0319b97fc1f2fcfc0709aeee7edc8c91090189c6124c888f4bfa66cb94b63728f6340a28559b457fcb61794bd338d433da5fe0e25f79
SSDEEP

196608:Ehz28+gZGIkKeWB/kvx+pj4cRiXO8WCgF8Bilj7t83oXKUFa:Eh683eWBMvx+pjRiXO0gCAVh83oXKUFa

Score

1^/10

Modifies Control Panel 3 IoCs

evasion

Processes:

Ship2005Group21.exe

description	ioc	process
Set value (str)	\REGISTRY\USER\S-1-5-21-1914912747-3343861975-731272777-1000\Control Panel\International\sShortDate = "yyyy.MM.dd"	Ship2005Group21.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1914912747-3343861975-731272777-1000\Control Panel\International\iDate = "2"	Ship2005Group21.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1914912747-3343861975-731272777-1000\Control Panel\International\sDate = "."	Ship2005Group21.exe

C:\Users\Admin\AppData\Local\Temp\Ship2005Group21.exe
"C:\Users\Admin\AppData\Local\Temp\Ship2005Group21.exe"
1⤵
- Modifies Control Panel
PID:1188

memory/1188-54-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download
memory/1188-55-0x0000000000400000-0x000000000372A000-memory.dmp

Filesize
51.2MB

Download