Analysis
-
max time kernel
16s -
max time network
12s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
11-09-2024 22:30
Static task
static1
Behavioral task
behavioral1
Sample
Outfit Editor.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Outfit Editor.exe
Resource
win10v2004-20240802-en
General
-
Target
Outfit Editor.exe
-
Size
428KB
-
MD5
0765a779e17e446bb74df7dfb75f7450
-
SHA1
6cf048596972013a27f9e968d86961f85ed72386
-
SHA256
a25cee8a38e8e8383a2da08a962e5a96bfb3758ceb58b5f547b87bc1f3d7aded
-
SHA512
d727ff584ce63239c06a9c6318df007d9e66e8d9dbe724a4e86eb173f2d292d19d3573468f80158f6809b772d7d9ba92905fe69368938b646f955279aa14a3c9
-
SSDEEP
6144:nszAXNK+3FZr1QhiWsQH/bm9g+CG66GLHQH/bm9g+CG6G0jbpPm3Fu:nLXFcfqFCnwfqFCU0jb1mY
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 17 IoCs
pid Process 3984 Outfit Editor.exe 3984 Outfit Editor.exe 3984 Outfit Editor.exe 3984 Outfit Editor.exe 3984 Outfit Editor.exe 3984 Outfit Editor.exe 3984 Outfit Editor.exe 3984 Outfit Editor.exe 3984 Outfit Editor.exe 3984 Outfit Editor.exe 3984 Outfit Editor.exe 3984 Outfit Editor.exe 3984 Outfit Editor.exe 3984 Outfit Editor.exe 3984 Outfit Editor.exe 3984 Outfit Editor.exe 3984 Outfit Editor.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3984 Outfit Editor.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3984 Outfit Editor.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
615B
MD56084477b197f8372ce19f1da9dd2bd49
SHA15889d84246fbd001eb69623a676780694abd5f11
SHA25661087d852cf84bdf33e0123a8a3e792ae388691538ebee2dc4e259d4561d7009
SHA5121a676fb5375cc338977f05882b9123f6f0b1b37a4c6928f5f82c444ff442043eccfa3a4cec89938fa221a7d5aefaaaf2005ed88cf6e15ad8f44f8303f2b2e173