Overview
overview
3Static
static
3Recuperar ...re.dll
windows7-x64
1Recuperar ...re.dll
windows10-2004-x64
1Recuperar ...ui.dll
windows7-x64
1Recuperar ...ui.dll
windows10-2004-x64
1Recuperar ...ts.dll
windows7-x64
1Recuperar ...ts.dll
windows10-2004-x64
1Recuperar ...-2.dll
windows7-x64
1Recuperar ...-2.dll
windows10-2004-x64
1Recuperar ...-1.dll
windows7-x64
1Recuperar ...-1.dll
windows10-2004-x64
1Recuperar ...-2.dll
windows7-x64
1Recuperar ...-2.dll
windows10-2004-x64
1Recuperar ...-8.dll
windows7-x64
1Recuperar ...-8.dll
windows10-2004-x64
1Recuperar ...10.dll
windows7-x64
1Recuperar ...10.dll
windows10-2004-x64
1Recuperar ...n1.dll
windows7-x64
1Recuperar ...n1.dll
windows10-2004-x64
1Recuperar ...gz.dll
windows7-x64
1Recuperar ...gz.dll
windows10-2004-x64
1Recuperar ...n.html
windows7-x64
3Recuperar ...n.html
windows10-2004-x64
3Recuperar ...in.exe
windows7-x64
1Recuperar ...in.exe
windows10-2004-x64
1Recuperar ...nv.dll
windows7-x64
1Recuperar ...nv.dll
windows10-2004-x64
1Recuperar ...-1.dll
windows7-x64
1Recuperar ...-1.dll
windows10-2004-x64
1Recuperar ...-2.dll
windows7-x64
1Recuperar ...-2.dll
windows10-2004-x64
1Recuperar ...-6.dll
windows7-x64
1Recuperar ...-6.dll
windows10-2004-x64
1Analysis
-
max time kernel
137s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
11/08/2024, 01:58
Behavioral task
behavioral1
Sample
Recuperar archivos/Qt5Core.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Recuperar archivos/Qt5Core.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Recuperar archivos/Qt5Gui.dll
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
Recuperar archivos/Qt5Gui.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Recuperar archivos/Qt5Widgets.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
Recuperar archivos/Qt5Widgets.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Recuperar archivos/cygewf-2.dll
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
Recuperar archivos/cygewf-2.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Recuperar archivos/cyggcc_s-seh-1.dll
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
Recuperar archivos/cyggcc_s-seh-1.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Recuperar archivos/cygiconv-2.dll
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
Recuperar archivos/cygiconv-2.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Recuperar archivos/cygjpeg-8.dll
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
Recuperar archivos/cygjpeg-8.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Recuperar archivos/cygncursesw-10.dll
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
Recuperar archivos/cygncursesw-10.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Recuperar archivos/cygwin1.dll
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
Recuperar archivos/cygwin1.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Recuperar archivos/cygz.dll
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
Recuperar archivos/cygz.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Recuperar archivos/documentation.html
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
Recuperar archivos/documentation.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Recuperar archivos/fidentify_win.exe
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
Recuperar archivos/fidentify_win.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Recuperar archivos/iconv.dll
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
Recuperar archivos/iconv.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Recuperar archivos/libbz2-1.dll
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
Recuperar archivos/libbz2-1.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Recuperar archivos/libewf-2.dll
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
Recuperar archivos/libewf-2.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Recuperar archivos/libfreetype-6.dll
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
Recuperar archivos/libfreetype-6.dll
Resource
win10v2004-20240802-en
General
-
Target
Recuperar archivos/cyggcc_s-seh-1.dll
-
Size
480KB
-
MD5
76ba4b7bb4986f7183f943156024b707
-
SHA1
8fe9ad20fb8bd4dc4c9f97fa78029ff5b7aac312
-
SHA256
38425ee608500b6808bcfe4569ea7f6387a436e8b779979c9c3c045201b87260
-
SHA512
d1d25b64b08f618c83b7d52c409547a944a03c60f1344f7bfbb8b2401871f603a78eb8f2019d70a821c076f0e4332eb6d932f82b91f35d113f5fb1becb29d262
-
SSDEEP
6144:lruzEL9hCJI7jConQLOV0V/sMX27vtNkBxoLwCVIp2GEs:wzEL9kSClFjuvtNkBRCVIpJEs
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
description pid Process Token: SeRestorePrivilege 4284 rundll32.exe Token: SeBackupPrivilege 4284 rundll32.exe Token: SeDebugPrivilege 4284 rundll32.exe