Analysis
-
max time kernel
21s -
max time network
23s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
09/07/2024, 19:31
Static task
static1
Behavioral task
behavioral1
Sample
Outfit Editor/Outfit Editor.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Outfit Editor/Outfit Editor.exe
Resource
win10v2004-20240709-en
General
-
Target
Outfit Editor/Outfit Editor.exe
-
Size
1.6MB
-
MD5
49e54fbb5407a27b11e24aaab6f4d846
-
SHA1
c44a964f40f34fab22e9e7e0d2484dd0c7a4ebc3
-
SHA256
ee145d73983d3a8becc3c1f9eb511d1f37e2e2bd4a9b17401fb09d87c2847992
-
SHA512
7a0027dea27223f1222a4cf87da827f99db702c56eea4f758ef02b98064affeb6a708810215d1264e06b17774910ff173e86d75700a67758581d6d697ea500ac
-
SSDEEP
24576:SKeB/9bCvsDpQCgbDgKl708219o3Vk8wJaalAqxmiugrsb9iMRs1GhNfKkrSTHxl:7dFalzxuf8kujxUX4it4sPvPd1YX5K
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 16 IoCs
flow ioc 9 raw.githubusercontent.com 10 raw.githubusercontent.com 15 raw.githubusercontent.com 17 raw.githubusercontent.com 18 raw.githubusercontent.com 19 raw.githubusercontent.com 4 raw.githubusercontent.com 8 raw.githubusercontent.com 14 raw.githubusercontent.com 16 raw.githubusercontent.com 2 pastebin.com 3 pastebin.com 11 raw.githubusercontent.com 5 raw.githubusercontent.com 12 raw.githubusercontent.com 13 raw.githubusercontent.com -
Suspicious behavior: EnumeratesProcesses 16 IoCs
pid Process 3000 Outfit Editor.exe 3000 Outfit Editor.exe 3000 Outfit Editor.exe 3000 Outfit Editor.exe 3000 Outfit Editor.exe 3000 Outfit Editor.exe 3000 Outfit Editor.exe 3000 Outfit Editor.exe 3000 Outfit Editor.exe 3000 Outfit Editor.exe 3000 Outfit Editor.exe 3000 Outfit Editor.exe 3000 Outfit Editor.exe 3000 Outfit Editor.exe 3000 Outfit Editor.exe 3000 Outfit Editor.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3000 Outfit Editor.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
613B
MD58496c18a252f948a6e5952511b70c279
SHA11e93d8a2bdeba49fb23d50f389f1233a45c5cb4c
SHA25679edad12a2957dc5b05b9346ac5a18fc9a3beb30cd960d31ba6efca85434a29f
SHA512e7d1c28a3b7de9459aa0330fcca6a8e0ac61ca1a84e3dfa102840bd0158108b6271c88993b883692e64032c9f6d7029dddfdea133aad0ea4946a65f4165fc1dc
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b