e0c0ae5a6fa1a494f37ca427bbcb459d92667ca95e6ee33985c91c1c31888b51

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
19-07-2023 08:29

Target

Ship2005Group20210330.exe
Size

8.4MB
MD5

ab36c2f86b1500db3e7ac9af39bb6058
SHA1

1812ef31a02121e0e9221e320ecea135fbdab9db
SHA256

e0c0ae5a6fa1a494f37ca427bbcb459d92667ca95e6ee33985c91c1c31888b51
SHA512

634866116d4b20ee4e60e23334148c90523f12689b9d77551dcdbaf7004c380ce5f832e4d991bebf9955b0a6d97eefb37f00dbf9588ee4a407bea370bc1756bc
SSDEEP

196608:nbv+4HxaQOlrmNKU1okes4EsY32EKny6Cb2KWC4Sq5vF8AQkPCViOlbKs:nbLH1kuokYETdKyozDvFBQfViOlbKs

Score

1^/10

Modifies Control Panel 3 IoCs

evasion

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-377084978-2088738870-2818360375-1000\Control Panel\International\sShortDate = "yyyy.MM.dd"	Ship2005Group20210330.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-377084978-2088738870-2818360375-1000\Control Panel\International\iDate = "2"	Ship2005Group20210330.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-377084978-2088738870-2818360375-1000\Control Panel\International\sDate = "."	Ship2005Group20210330.exe

C:\Users\Admin\AppData\Local\Temp\Ship2005Group20210330.exe
"C:\Users\Admin\AppData\Local\Temp\Ship2005Group20210330.exe"
1⤵
- Modifies Control Panel
PID:2332

memory/2332-54-0x0000000000400000-0x0000000003540000-memory.dmp

Filesize
49.2MB

Download
memory/2332-55-0x0000000000400000-0x0000000003540000-memory.dmp

Filesize
49.2MB

Download
memory/2332-56-0x00000000002B0000-0x00000000002B1000-memory.dmp

Filesize
4KB

Download
memory/2332-57-0x0000000000400000-0x0000000003540000-memory.dmp

Filesize
49.2MB

Download