Overview
overview
7Static
static
39eed026695...1a.exe
windows7-x64
39eed026695...1a.exe
windows10-2004-x64
7$0/Archive...64.dll
windows7-x64
1$0/Archive...64.dll
windows10-2004-x64
1$0/Microso...er.dll
windows7-x64
1$0/Microso...er.dll
windows10-2004-x64
1$0/SaferWe...er.exe
windows7-x64
1$0/SaferWe...er.exe
windows10-2004-x64
1$0/System....te.dll
windows7-x64
1$0/System....te.dll
windows10-2004-x64
1$0/System....le.dll
windows7-x64
1$0/System....le.dll
windows10-2004-x64
1$0/rsAtom.dll
windows7-x64
1$0/rsAtom.dll
windows10-2004-x64
1$0/rsDatabase.dll
windows7-x64
1$0/rsDatabase.dll
windows10-2004-x64
1$0/rsJSON.dll
windows7-x64
1$0/rsJSON.dll
windows10-2004-x64
1$0/rsLogger.dll
windows7-x64
1$0/rsLogger.dll
windows10-2004-x64
1$0/rsStubLib.dll
windows7-x64
1$0/rsStubLib.dll
windows10-2004-x64
1$0/rsTime.dll
windows7-x64
1$0/rsTime.dll
windows10-2004-x64
1$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
20-07-2024 03:49
Static task
static1
Behavioral task
behavioral1
Sample
9eed0266959ef508668bfba87de09ef6aa5d74dd19e91f0e74b6e3653d448b1a.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9eed0266959ef508668bfba87de09ef6aa5d74dd19e91f0e74b6e3653d448b1a.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
$0/ArchiveUtilityx64.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$0/ArchiveUtilityx64.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
$0/Microsoft.Win32.TaskScheduler.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
$0/Microsoft.Win32.TaskScheduler.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
$0/SaferWeb-installer.exe
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
$0/SaferWeb-installer.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
$0/System.Data.SQLite.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
$0/System.Data.SQLite.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
$0/System.ValueTuple.dll
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
$0/System.ValueTuple.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
$0/rsAtom.dll
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
$0/rsAtom.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
$0/rsDatabase.dll
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
$0/rsDatabase.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
$0/rsJSON.dll
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
$0/rsJSON.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral19
Sample
$0/rsLogger.dll
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
$0/rsLogger.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
$0/rsStubLib.dll
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
$0/rsStubLib.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
$0/rsTime.dll
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
$0/rsTime.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240704-en
General
-
Target
$0/SaferWeb-installer.exe
-
Size
478KB
-
MD5
cd788cd014faf68e4880fcacc87d584e
-
SHA1
88939cf32a2c4550046304c36a830e89f8d53ae2
-
SHA256
c27bc42aaccb99060646cdac71f4afc363eba40197f53222e7c27613c289cf92
-
SHA512
57de1f077f5a3b6c12308c35c63c44b701a9239b2d22dc3a8a1f5b2392feb3082757523c5f0ae1942b3a3ff5064e3707524eaef15b68772f7c6003c613906a01
-
SSDEEP
6144:9DdjrKos4c625/x25KYaW19+N5P9eIpeWijnUcI:9Ddjr1hcd9/YaW19+N5P9eIcUcI
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4804 SaferWeb-installer.exe