Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
28/05/2024, 08:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PerfectBestiary.exe
Resource
win7-20240220-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
PerfectBestiary.exe
Resource
win10v2004-20240508-en
3 signatures
150 seconds
General
-
Target
PerfectBestiary.exe
-
Size
1.7MB
-
MD5
56299c9cfe663c50dfa3002eccea5ddf
-
SHA1
ac25f06645bbf315205c12432d3819b57426ea67
-
SHA256
4ad7143c04904170e57334719b85ea06d50422f532881b554532cd0526d81678
-
SHA512
80a6d7b18103ad710b1951845a7277f99e9ac0cfa2d93b073ba29fb46f16b53739a1e67730795f2479f3ed7de55d2c86dd868226980e1fab4159f67a392e8b5c
-
SSDEEP
49152:CZNZoqF+4Q36YOlBPsZUAoJRP3jijQI3Pb+4QGiq:CZN+4I6YOlB9VjWHQG
Score
8/10
Malware Config
Signatures
-
Drops file in Drivers directory 1 IoCs
description ioc Process File opened for modification C:\Windows\system32\drivers\etc\hosts PerfectBestiary.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2240 PerfectBestiary.exe 2240 PerfectBestiary.exe -
Suspicious use of AdjustPrivilegeToken 13 IoCs
description pid Process Token: SeDebugPrivilege 2240 PerfectBestiary.exe Token: 33 2240 PerfectBestiary.exe Token: SeIncBasePriorityPrivilege 2240 PerfectBestiary.exe Token: 33 2240 PerfectBestiary.exe Token: SeIncBasePriorityPrivilege 2240 PerfectBestiary.exe Token: 33 2240 PerfectBestiary.exe Token: SeIncBasePriorityPrivilege 2240 PerfectBestiary.exe Token: 33 2240 PerfectBestiary.exe Token: SeIncBasePriorityPrivilege 2240 PerfectBestiary.exe Token: 33 2240 PerfectBestiary.exe Token: SeIncBasePriorityPrivilege 2240 PerfectBestiary.exe Token: 33 2240 PerfectBestiary.exe Token: SeIncBasePriorityPrivilege 2240 PerfectBestiary.exe