cee9ff1cd6da9dd30500742e916c83044128e9d74268b7c4a223a14753df96cb

Analysis

max time kernel
26s
max time network
30s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
14-06-2023 19:46

Target

Ship2005Group6.exe
Size

8.7MB
MD5

277e13787b3f534097c4a87969a87db8
SHA1

3ef835e7f39d7740f79656c184d3594881da937a
SHA256

cee9ff1cd6da9dd30500742e916c83044128e9d74268b7c4a223a14753df96cb
SHA512

b9f9bb192009f2ddd3a3f5bda8bb756700830c50d83d1db908542045eb43b136f420c3791c595e23c107c5a3ae681057280fe9cf94aec48ba2daaeaf0bb393ca
SSDEEP

196608:+bLxq9zuD3G6Oe7T+4LuXvtvxZy14+S14LYxcFO+Q9sZxfH4afRiOLnH:+b1f/z3LuftZZy1r3F5dTfHnR

Score

1^/10

Modifies Control Panel 3 IoCs

evasion

Processes:

Ship2005Group6.exe

description	ioc	process
Set value (str)	\REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000\Control Panel\International\sShortDate = "yyyy.MM.dd"	Ship2005Group6.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000\Control Panel\International\iDate = "2"	Ship2005Group6.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000\Control Panel\International\sDate = "."	Ship2005Group6.exe

C:\Users\Admin\AppData\Local\Temp\Ship2005Group6.exe
"C:\Users\Admin\AppData\Local\Temp\Ship2005Group6.exe"
1⤵
- Modifies Control Panel
PID:324

memory/324-54-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download
memory/324-55-0x0000000000400000-0x00000000036C1000-memory.dmp

Filesize
50.8MB

Download