9fb4bf595a7874dd338ede109de65329b8b4c2da9b6dfd83a803e20fe81bdbd2 | Triage

Analysis

max time kernel
28s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
14-06-2023 19:39

Sharing

Report Analysis Logs

General

Target

Ship2005Group13.exe
Size

8.8MB
MD5

be4e1a83b5011c7f72fae277737d58bd
SHA1

02e9174588d5700d99389f7d8b78ec1539f71259
SHA256

9fb4bf595a7874dd338ede109de65329b8b4c2da9b6dfd83a803e20fe81bdbd2
SHA512

89747f941d9f271a80d4df159bc71d20937c6ee9448e30da63b7f6324f97d5e1ef9909d36041eee47dfe6e66b1ff2dccd7c430c5605b69903228a62ef522b06b
SSDEEP

196608:AJX4QzTxWvS4HM0+czFE3mhhz1OO6RRRWUG6Jh9x7:AprTkS4s0+gFEWobXF

Score

1^/10

Malware Config

Signatures

Modifies Control Panel 3 IoCs

Processes:

Ship2005Group13.exe

description	ioc	process
Set value (str)	\REGISTRY\USER\S-1-5-21-1914912747-3343861975-731272777-1000\Control Panel\International\sShortDate = "yyyy.MM.dd"	Ship2005Group13.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1914912747-3343861975-731272777-1000\Control Panel\International\iDate = "2"	Ship2005Group13.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1914912747-3343861975-731272777-1000\Control Panel\International\sDate = "."	Ship2005Group13.exe

C:\Users\Admin\AppData\Local\Temp\Ship2005Group13.exe
"C:\Users\Admin\AppData\Local\Temp\Ship2005Group13.exe"
1⤵
- Modifies Control Panel
PID:1524

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1524-54-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download
memory/1524-55-0x0000000000400000-0x0000000003700000-memory.dmp

Filesize
51.0MB

Download