Overview
overview
3Static
static
3Dork Searc...v3.exe
windows7-x64
3Dork Searc...v3.exe
windows10-2004-x64
1Dork Searc...te.dll
windows7-x64
1Dork Searc...te.dll
windows10-2004-x64
1Dork Searc...op.dll
windows7-x64
1Dork Searc...op.dll
windows10-2004-x64
1Dork Searc...op.dll
windows7-x64
1Dork Searc...op.dll
windows10-2004-x64
1Dork Searc...et.dll
windows7-x64
1Dork Searc...et.dll
windows10-2004-x64
1Analysis
-
max time kernel
92s -
max time network
100s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
08/06/2024, 10:09
Static task
static1
Behavioral task
behavioral1
Sample
Dork Search V3/Dork Searcher v3.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Dork Search V3/Dork Searcher v3.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
Dork Search V3/System.Data.SQLite.dll
Resource
win7-20240419-en
Behavioral task
behavioral4
Sample
Dork Search V3/System.Data.SQLite.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
Dork Search V3/x64/SQLite.Interop.dll
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
Dork Search V3/x64/SQLite.Interop.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
Dork Search V3/x86/SQLite.Interop.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Dork Search V3/x86/SQLite.Interop.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
Dork Search V3/xNet.dll
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
Dork Search V3/xNet.dll
Resource
win10v2004-20240426-en
General
-
Target
Dork Search V3/Dork Searcher v3.exe
-
Size
67.5MB
-
MD5
157b17b9a7a0f283f166f79493fc6d4d
-
SHA1
cc73d4cebd93e0c70c50ea8e1437cbae0e55ed25
-
SHA256
435464cd2adfee9ab666aed43ca2be2cc61994952c7b05d4dc257575b5f13d46
-
SHA512
0a83c82ce1b5700ba967a7e12a2f279f69a07e9e65e4d77b6970dc34441b907125d6c3ce937f0afb6c3e0b7892ee2ddf667be2e94b2f711b405951a0f99518b7
-
SSDEEP
1572864:LnxFW9n6jyr5lI72oDD5neYCO1UF4CRlq4+K9Q2Zvb3+00yuO0:tFQ0y1e72oDDNsOYlj195p5IO0
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4984 Dork Searcher v3.exe