Overview
overview
3Static
static
1AIMi-main.zip
windows10-2004-x64
1AIMi-main/...NG.yml
windows10-2004-x64
3AIMi-main/LICENSE
windows10-2004-x64
1AIMi-main/README.md
windows10-2004-x64
3AIMi-main/...ts.txt
windows10-2004-x64
1AIMi-main/gpu test.py
windows10-2004-x64
3AIMi-main/...ect.py
windows10-2004-x64
3AIMi-main/...labels
windows10-2004-x64
3AIMi-main/...ny.cfg
windows10-2004-x64
3AIMi-main/...eights
windows10-2004-x64
3AIMi-main/...nsfile
windows10-2004-x64
1AIMi-main/...kefile
windows10-2004-x64
1AIMi-main/...n.json
windows10-2004-x64
3AIMi-main/...og.old
windows10-2004-x64
3AIMi-main/...compat
windows10-2004-x64
1AIMi-main/...ontrol
windows10-2004-x64
1AIMi-main/...yright
windows10-2004-x64
1AIMi-main/...nstall
windows10-2004-x64
3AIMi-main/...rrides
windows10-2004-x64
3AIMi-main/...re.vbs
windows10-2004-x64
1AIMi-main/.../rules
windows10-2004-x64
1AIMi-main/...nlinux
windows10-2004-x64
3AIMi-main/...centos
windows10-2004-x64
3AIMi-main/...debian
windows10-2004-x64
3AIMi-main/...e-leap
windows10-2004-x64
3AIMi-main/...ubuntu
windows10-2004-x64
3AIMi-main/...ker.mk
windows10-2004-x64
3AIMi-main/...er.vbs
windows10-2004-x64
1AIMi-main/...ICENSE
windows10-2004-x64
1AIMi-main/start.py
windows10-2004-x64
3AIMi-main/...rab.py
windows10-2004-x64
3AIMi-main/...uts.py
windows10-2004-x64
3Analysis
-
max time kernel
1492s -
max time network
1467s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
17/02/2024, 15:11
Static task
static1
Behavioral task
behavioral1
Sample
AIMi-main.zip
Resource
win10v2004-20231215-en
Behavioral task
behavioral2
Sample
AIMi-main/.github/FUNDING.yml
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
AIMi-main/LICENSE
Resource
win10v2004-20231215-en
Behavioral task
behavioral4
Sample
AIMi-main/README.md
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
AIMi-main/assets/requirements.txt
Resource
win10v2004-20231222-en
Behavioral task
behavioral6
Sample
AIMi-main/gpu test.py
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
AIMi-main/lib/detect.py
Resource
win10v2004-20231222-en
Behavioral task
behavioral8
Sample
AIMi-main/models/coco-dataset.labels
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
AIMi-main/models/yolov3-tiny.cfg
Resource
win10v2004-20231215-en
Behavioral task
behavioral10
Sample
AIMi-main/models/yolov3-tiny.weights
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
AIMi-main/nvidia docker/Jenkinsfile
Resource
win10v2004-20231215-en
Behavioral task
behavioral12
Sample
AIMi-main/nvidia docker/Makefile
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
AIMi-main/nvidia docker/daemon.json
Resource
win10v2004-20231215-en
Behavioral task
behavioral14
Sample
AIMi-main/nvidia docker/debian/changelog.old
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
AIMi-main/nvidia docker/debian/compat
Resource
win10v2004-20231215-en
Behavioral task
behavioral16
Sample
AIMi-main/nvidia docker/debian/control
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
AIMi-main/nvidia docker/debian/copyright
Resource
win10v2004-20231215-en
Behavioral task
behavioral18
Sample
AIMi-main/nvidia docker/debian/nvidia-docker2.install
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
AIMi-main/nvidia docker/debian/nvidia-docker2.lintian-overrides
Resource
win10v2004-20231215-en
Behavioral task
behavioral20
Sample
AIMi-main/nvidia docker/debian/prepare.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
AIMi-main/nvidia docker/debian/rules
Resource
win10v2004-20231222-en
Behavioral task
behavioral22
Sample
AIMi-main/nvidia docker/docker/Dockerfile.amazonlinux
Resource
win10v2004-20231222-en
Behavioral task
behavioral23
Sample
AIMi-main/nvidia docker/docker/Dockerfile.centos
Resource
win10v2004-20231222-en
Behavioral task
behavioral24
Sample
AIMi-main/nvidia docker/docker/Dockerfile.debian
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
AIMi-main/nvidia docker/docker/Dockerfile.opensuse-leap
Resource
win10v2004-20231215-en
Behavioral task
behavioral26
Sample
AIMi-main/nvidia docker/docker/Dockerfile.ubuntu
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
AIMi-main/nvidia docker/docker/docker.mk
Resource
win10v2004-20231215-en
Behavioral task
behavioral28
Sample
AIMi-main/nvidia docker/nvidia-docker.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
AIMi-main/nvidia docker/rpm/SOURCES/LICENSE
Resource
win10v2004-20231215-en
Behavioral task
behavioral30
Sample
AIMi-main/start.py
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
AIMi-main/utils/grab.py
Resource
win10v2004-20231215-en
Behavioral task
behavioral32
Sample
AIMi-main/utils/inputs.py
Resource
win10v2004-20231215-en
General
-
Target
AIMi-main/nvidia docker/Makefile
-
Size
1KB
-
MD5
e5254378efd74ff94588b71608af5400
-
SHA1
c7db6ce478b4468a8ea9d00a2a1db113a4b93243
-
SHA256
3414f25fd77007cfd6885fefe4053e479c5ef8ba0f1b5b9d056668dd437e789e
-
SHA512
37d6f74df2e2a702975fc0e919f8147058566eb2eefa3ead80cdc46d340b779047f3fe34eb3556a55ae39aaa507e8310b6839331f4499e8e4f768d648a68de48
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeManageVolumePrivilege 3044 svchost.exe
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\AIMi-main\nvidia docker\Makefile"1⤵PID:2248
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵PID:2288
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3044