Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
25-03-2024 19:38
Static task
static1
Behavioral task
behavioral1
Sample
The-BEST-South-Bronx-Script-Autofarm-Aimbot-No-78478.zip
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
The-BEST-South-Bronx-Script-Autofarm-Aimbot-No-78478.zip
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
Setup_02026.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Setup_02026.exe
Resource
win10v2004-20240226-en
General
-
Target
Setup_02026.exe
-
Size
29.1MB
-
MD5
11541e9399560ea97c1f7483cf744c9c
-
SHA1
a5a160e839016d4a78050abb8d90b8ded203d396
-
SHA256
c7eb6850156399a4c81ead9ab7dd6ae492a6ebd67c4cc3d6f8b8650d227a01eb
-
SHA512
00309f4b2edf30511dd1ca1d11c3de227e1faca131c6b2513986aef6962957e56e38f74e554fe818def2666ae7f54d2f4a3b1d4c17fae1c6d0e110aa773606a8
-
SSDEEP
786432:dtTti+71wT4MrC+br2arbaDr6gOsC5yofQZTib6fzfHwSN2MbSZNjt3KWAv6J:C59fQZ86fTHwSN2MbSZXKW9J
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1712 Setup_02026.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1712 Setup_02026.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1712 Setup_02026.exe