Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
13-11-2024 19:39
Behavioral task
behavioral1
Sample
SAM X222C#.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
SAM X222C#.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Realtek HD Audio Universal Service.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Realtek HD Audio Universal Service.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
SAM X222C#.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
SAM X222C#.exe
Resource
win10v2004-20241007-en
General
-
Target
SAM X222C#.exe
-
Size
3.7MB
-
MD5
ad991add5af431b8d808cf9035a5cd46
-
SHA1
d7ac382fa834529219db1b76e4d928ff24f1245b
-
SHA256
a1dfdf32f2a82156bb3007896a9672fa05aba8ce4c668c3f4dce449a1a811a19
-
SHA512
b876e8380ab97dade3f875a7e0cee2dc598ba55143921bdd1f1d9d2d5be55c25d62b12aaef424227e1450f6ddf67a4e04e3f4fc846182abb842c4c821997cbbd
-
SSDEEP
98304:laMw+woaBHtFIT4bNJFY3Oqtbh+KH4kpc+DX/0Hd:S+nAbjBHYcKYOD8
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS SAM X222C#.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer SAM X222C#.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemVersion SAM X222C#.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4588 SAM X222C#.exe