Analysis
-
max time kernel
136s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
04-02-2024 10:44
Static task
static1
Behavioral task
behavioral1
Sample
v2/dope internal.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
v2/dope internal.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
v2/dope loader.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
v2/dope loader.exe
Resource
win10v2004-20231215-en
General
-
Target
v2/dope loader.exe
-
Size
1.5MB
-
MD5
155f8014c4f3319cf9bdf65bf2c29f42
-
SHA1
9fedaa42435f6131d5e99252731dbff0c075e3d6
-
SHA256
f2e9be17d91fabf119ad4c318887a282fec3744841f53d4118d4eca2009e8fd1
-
SHA512
2fbeafa3052b59f22239212348f9aa4b2466342c299f6226a965d760997b56bc0732882700b79bd54d92b66eba0da7c6a15480ea624f280339f87f0e165f7817
-
SSDEEP
24576:IMwzsXuX7vt4INWTqaDS33KL1vjzSbaRa7LBLk6aqzIqHwUeEQbjL7knJPLohAn6:IMwYXE7lNWjsKhvjGB7dLk6NLw5bsMhm
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2988 dope loader.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeSecurityPrivilege 2988 dope loader.exe Token: SeDebugPrivilege 2988 dope loader.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2988 dope loader.exe