Analysis
-
max time kernel
173s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
14/10/2023, 02:29
Static task
static1
Behavioral task
behavioral1
Sample
PKMO_Factura_9128_SDOG2116.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
PKMO_Factura_9128_SDOG2116.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
_____________634634003803.dll
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
_____________634634003803.dll
Resource
win10v2004-20230915-en
General
-
Target
PKMO_Factura_9128_SDOG2116.exe
-
Size
131.8MB
-
MD5
fb51d4584fb24e6f6bfcab72df30c682
-
SHA1
9f4e98009a2eea0b9ccaf593cb1c7d061d48d2a0
-
SHA256
794ab5f1cab875679ae399725bcb1091f9967bb5d7677d9422310c7a94182c92
-
SHA512
2360f65f550ecf4899fe2d2d41cc0d271c927ee81c0f0a7106767d1401ef9525349ab1c48f2c97691eb94ddeadd37db8a7c171a452ee11371690f017f29cb970
-
SSDEEP
98304:mXpZ1fvtxcBdvOB4fGftI8D90yQu8mVIjzM5hPIiiC1/MN:AZ1tmf0tIC9/Qu8QIUF/M
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 PKMO_Factura_9128_SDOG2116.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString PKMO_Factura_9128_SDOG2116.exe -
Enumerates system info in registry 2 TTPs 4 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS PKMO_Factura_9128_SDOG2116.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer PKMO_Factura_9128_SDOG2116.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName PKMO_Factura_9128_SDOG2116.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemVersion PKMO_Factura_9128_SDOG2116.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2144 PKMO_Factura_9128_SDOG2116.exe 2144 PKMO_Factura_9128_SDOG2116.exe