Overview
overview
3Static
static
3imrp_bypass.rar
windows7-x64
3imrp_bypass.rar
windows10-2004-x64
3RUN ME AS ADMIN.bat
windows7-x64
1RUN ME AS ADMIN.bat
windows10-2004-x64
1lscw.dll
windows7-x64
1lscw.dll
windows10-2004-x64
1menu.exe
windows7-x64
1menu.exe
windows10-2004-x64
1signaler.exe
windows7-x64
1signaler.exe
windows10-2004-x64
1stealth.dll
windows7-x64
1stealth.dll
windows10-2004-x64
1Analysis
-
max time kernel
95s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
21/07/2024, 19:41
Static task
static1
Behavioral task
behavioral1
Sample
imrp_bypass.rar
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
imrp_bypass.rar
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
RUN ME AS ADMIN.bat
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
RUN ME AS ADMIN.bat
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
lscw.dll
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
lscw.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
menu.exe
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
menu.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
signaler.exe
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
signaler.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
stealth.dll
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
stealth.dll
Resource
win10v2004-20240709-en
General
-
Target
menu.exe
-
Size
27KB
-
MD5
2c527da818531206df06ce8534ce71e6
-
SHA1
c44fbbe4854c593a0c8d2343e1c65a801f3e267f
-
SHA256
1e2eeb0b541c827f67603de1d203ce467d58efb828d3c5869841c8ec8ff43b3d
-
SHA512
c281c4003d4f06542b1de50aaf6a9d3d72fd9048f8e2bdf60444b772bc602cb749b96677159cffc479511b39149e2cfc909daf34b2cc465fb0d26231583dfd3b
-
SSDEEP
384:+wacKSm5RTFSHe90JwXdHS2faSc3mdmVSnZXl7rz/w0jyaVc2VcIVa7I6iaFX7:/uh90JwRSUIIZXBrz5VcxIk7IYr
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2340 menu.exe 2340 menu.exe