Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
09-11-2024 16:41
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Lucky SkinChanger.exe
Resource
win7-20241010-en
2 signatures
150 seconds
General
-
Target
Lucky SkinChanger.exe
-
Size
2.1MB
-
MD5
795a68d97113af5bfe54e3b0250ee2d4
-
SHA1
65d1bd69f7fb761ffe0831548b41af9d107692db
-
SHA256
1800e21eac1384cd70ce9edc4b58301eb632eb01489481034a3cd292314dc9ff
-
SHA512
b87ecd159a781b83fb1e59c6e2aa372f364047832081920c2f8cb1699793536066b5e9150ec447dc280540bb5032aca5da0a1302892d561820009f95ae747990
-
SSDEEP
49152:RL1bLMB4ZrlZ/TZGvyAmbJKHo54cl8LH+tkWJ0X4:PLFZz/taAEjcmHgkWJ0X
Score
6/10
Malware Config
Signatures
-
Looks up external IP address via web service 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 4 api.ipify.org 5 api.ipify.org -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2484 Lucky SkinChanger.exe