Overview
overview
7Static
static
3Saphire 2020.zip
windows7-x64
1Saphire 2020.zip
windows10-2004-x64
7Saphire 20...me.txt
windows7-x64
1Saphire 20...me.txt
windows10-2004-x64
1Saphire 20...20.exe
windows7-x64
7Saphire 20...20.exe
windows10-2004-x64
7Saphire 20...ol.exe
windows7-x64
1Saphire 20...ol.exe
windows10-2004-x64
3Saphire 20...ae.dll
windows7-x64
1Saphire 20...ae.dll
windows10-2004-x64
1Saphire 20...vr.lic
windows7-x64
3Saphire 20...vr.lic
windows10-2004-x64
3Analysis
-
max time kernel
20s -
max time network
36s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
31/10/2024, 15:14
Static task
static1
Behavioral task
behavioral1
Sample
Saphire 2020.zip
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
Saphire 2020.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Saphire 2020/Read me.txt
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
Saphire 2020/Read me.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Saphire 2020/sapphire-ae-install-2020.exe
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
Saphire 2020/sapphire-ae-install-2020.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Saphire 2020/step2/bfx-license-tool/bfx-license-tool.exe
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
Saphire 2020/step2/bfx-license-tool/bfx-license-tool.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Saphire 2020/step2/lib64/sapphire_ae.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Saphire 2020/step2/lib64/sapphire_ae.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Saphire 2020/step3/GenArts/rlm/vr.lic
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
Saphire 2020/step3/GenArts/rlm/vr.lic
Resource
win10v2004-20241007-en
General
-
Target
Saphire 2020.zip
-
Size
312.4MB
-
MD5
5743f582e4820ba34380fed986431fe1
-
SHA1
432644ca37e56d9ebc77af4ad789bb3887258722
-
SHA256
b62fec10915de33ef8d731440fab95d8fb53fe1336abad1507a79c5928ee5109
-
SHA512
dfa462d5e153088c7078f7ade815289add37adf44d2b05ecd21532671333677c7b4effbff3dd11b51404e06b12e204b2dddec456958406e6e4ce2cf1288cce19
-
SSDEEP
6291456:N6jOwz3QvD7bJj8SB+VstXRKRFEAFHB8Xl7BrMMkRpmG:NgPjGJrBrwYgHBCtJG
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2224 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2224 7zFM.exe Token: 35 2224 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2224 7zFM.exe