Overview
overview
3Static
static
3processlas...2).zip
windows11-21h2-x64
1processlas...rtable
windows11-21h2-x64
3processlas...er.exe
windows11-21h2-x64
1processlas...ts.exe
windows11-21h2-x64
1processlas...er.exe
windows11-21h2-x64
1processlas...er.exe
windows11-21h2-x64
1processlas...or.exe
windows11-21h2-x64
1processlas...so.exe
windows11-21h2-x64
1processlas...er.exe
windows11-21h2-x64
3processlas...de.exe
windows11-21h2-x64
1processlas...er.exe
windows11-21h2-x64
1processlas...er.exe
windows11-21h2-x64
1processlas...so.bat
windows11-21h2-x64
1processlas...ms.exe
windows11-21h2-x64
1processlas...te.exe
windows11-21h2-x64
1processlas...se.dll
windows11-21h2-x64
1processlas...al.dll
windows11-21h2-x64
1processlas...sh.dll
windows11-21h2-x64
1processlas...sh.dll
windows11-21h2-x64
1processlas...ch.dll
windows11-21h2-x64
1processlas...an.dll
windows11-21h2-x64
1processlas...an.dll
windows11-21h2-x64
1processlas...se.dll
windows11-21h2-x64
1processlas...sh.dll
windows11-21h2-x64
1processlas...br.dll
windows11-21h2-x64
1processlas...an.dll
windows11-21h2-x64
1processlas...sh.dll
windows11-21h2-x64
1processlas...ub.exe
windows11-21h2-x64
1processlas...or.bat
windows11-21h2-x64
1processlas...or.bat
windows11-21h2-x64
1processlas...so.exe
windows11-21h2-x64
1processlas...sc.exe
windows11-21h2-x64
1Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows11-21h2_x64 -
resource
win11-20240426-en -
resource tags
arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system -
submitted
02-06-2024 09:49
Static task
static1
Behavioral task
behavioral1
Sample
processlasso_portable_64 (2).zip
Resource
win11-20240426-en
Behavioral task
behavioral2
Sample
processlasso_portable_64/.portable
Resource
win11-20240508-en
Behavioral task
behavioral3
Sample
processlasso_portable_64/CPUEater.exe
Resource
win11-20240508-en
Behavioral task
behavioral4
Sample
processlasso_portable_64/Insights.exe
Resource
win11-20240426-en
Behavioral task
behavioral5
Sample
processlasso_portable_64/InstallHelper.exe
Resource
win11-20240426-en
Behavioral task
behavioral6
Sample
processlasso_portable_64/LogViewer.exe
Resource
win11-20240508-en
Behavioral task
behavioral7
Sample
processlasso_portable_64/ProcessGovernor.exe
Resource
win11-20240426-en
Behavioral task
behavioral8
Sample
processlasso_portable_64/ProcessLasso.exe
Resource
win11-20240508-en
Behavioral task
behavioral9
Sample
processlasso_portable_64/ProcessLassoLauncher.exe
Resource
win11-20240508-en
Behavioral task
behavioral10
Sample
processlasso_portable_64/QuickUpgrade.exe
Resource
win11-20240419-en
Behavioral task
behavioral11
Sample
processlasso_portable_64/ThreadRacer.exe
Resource
win11-20240508-en
Behavioral task
behavioral12
Sample
processlasso_portable_64/TweakScheduler.exe
Resource
win11-20240426-en
Behavioral task
behavioral13
Sample
processlasso_portable_64/_Start-ProcessLasso.bat
Resource
win11-20240426-en
Behavioral task
behavioral14
Sample
processlasso_portable_64/bitsumms.exe
Resource
win11-20240426-en
Behavioral task
behavioral15
Sample
processlasso_portable_64/plActivate.exe
Resource
win11-20240508-en
Behavioral task
behavioral16
Sample
processlasso_portable_64/pl_rsrc_chinese.dll
Resource
win11-20240426-en
Behavioral task
behavioral17
Sample
processlasso_portable_64/pl_rsrc_chinese_traditional.dll
Resource
win11-20240426-en
Behavioral task
behavioral18
Sample
processlasso_portable_64/pl_rsrc_english.dll
Resource
win11-20240508-en
Behavioral task
behavioral19
Sample
processlasso_portable_64/pl_rsrc_finnish.dll
Resource
win11-20240508-en
Behavioral task
behavioral20
Sample
processlasso_portable_64/pl_rsrc_french.dll
Resource
win11-20240426-en
Behavioral task
behavioral21
Sample
processlasso_portable_64/pl_rsrc_german.dll
Resource
win11-20240508-en
Behavioral task
behavioral22
Sample
processlasso_portable_64/pl_rsrc_italian.dll
Resource
win11-20240419-en
Behavioral task
behavioral23
Sample
processlasso_portable_64/pl_rsrc_japanese.dll
Resource
win11-20240508-en
Behavioral task
behavioral24
Sample
processlasso_portable_64/pl_rsrc_polish.dll
Resource
win11-20240508-en
Behavioral task
behavioral25
Sample
processlasso_portable_64/pl_rsrc_ptbr.dll
Resource
win11-20240426-en
Behavioral task
behavioral26
Sample
processlasso_portable_64/pl_rsrc_russian.dll
Resource
win11-20240426-en
Behavioral task
behavioral27
Sample
processlasso_portable_64/pl_rsrc_spanish.dll
Resource
win11-20240426-en
Behavioral task
behavioral28
Sample
processlasso_portable_64/srvstub.exe
Resource
win11-20240426-en
Behavioral task
behavioral29
Sample
processlasso_portable_64/start-governor.bat
Resource
win11-20240426-en
Behavioral task
behavioral30
Sample
processlasso_portable_64/stop-governor.bat
Resource
win11-20240426-en
Behavioral task
behavioral31
Sample
processlasso_portable_64/testlasso.exe
Resource
win11-20240426-en
Behavioral task
behavioral32
Sample
processlasso_portable_64/vistammsc.exe
Resource
win11-20240508-en
General
-
Target
processlasso_portable_64/ProcessGovernor.exe
-
Size
936KB
-
MD5
188915b086edb404602bf83faba84080
-
SHA1
4cd4ddc39ca6571a2ccf4cb7b4f72fd62fe35478
-
SHA256
9e200c3af08903108b0f415d1670ef359512727e9163b0541f76a351954afe65
-
SHA512
99e98fda82cdba398320845807aeceec0a1b7c43a666c1c75743c83a2b2e4f75d9bcf991e0c4af0888e9fe9bf2ce5ab646c852817b13eeebec1960de10ea9652
-
SSDEEP
6144:PimshA8pyCod0+nsoj1+aRlkREib9yegspqvxLXoZX4RiDaYQ7Vbi/31U4Zssl8r:J48s+55+awb9yeGvtXEu/biD848fN
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 9 IoCs
Processes:
ProcessGovernor.exedescription pid process Token: SeAssignPrimaryTokenPrivilege 2972 ProcessGovernor.exe Token: SeDebugPrivilege 2972 ProcessGovernor.exe Token: SeChangeNotifyPrivilege 2972 ProcessGovernor.exe Token: SeIncBasePriorityPrivilege 2972 ProcessGovernor.exe Token: SeIncreaseQuotaPrivilege 2972 ProcessGovernor.exe Token: SeProfSingleProcessPrivilege 2972 ProcessGovernor.exe Token: SeCreateGlobalPrivilege 2972 ProcessGovernor.exe Token: SeBackupPrivilege 2972 ProcessGovernor.exe Token: SeRestorePrivilege 2972 ProcessGovernor.exe