Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
02/02/2024, 14:32
Static task
static1
Behavioral task
behavioral1
Sample
Bunifu_UI_v1.5.3.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Bunifu_UI_v1.5.3.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
FortSkinner.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
FortSkinner.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
xNet.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
xNet.dll
Resource
win10v2004-20231215-en
General
-
Target
FortSkinner.exe
-
Size
1.1MB
-
MD5
50df045cdba749672f4385184c8ec609
-
SHA1
35828018ed49e865d9b41bb6d5a6b38c3a340b58
-
SHA256
6626623918eb064ba6fb5d3ac9dc215e31fc428b12f2cb87112ad82878f02273
-
SHA512
e01a6cd599b37fa02be53e62d4c4e1733fd12c97ce5cae247907a09ee9a79aa58af3a2ebdbe6f4922d7b431b815e4ec5be40f3859a6e65cd38c678052c994410
-
SSDEEP
24576:F9unMP+PSSRWC/R0Q3Y6IuUONUE7AGmHXlnGP/g5VP:XunwSRnY6aONUE6XBGP45
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1924 FortSkinner.exe