Overview
overview
8Static
static
3M Centers ...86.zip
windows7-x64
1M Centers ...86.zip
windows10-2004-x64
1FluentWPF.dll
windows7-x64
1FluentWPF.dll
windows10-2004-x64
1M Centers.exe
windows7-x64
6M Centers.exe
windows10-2004-x64
8M Centers.exe.config
windows7-x64
3M Centers.exe.config
windows10-2004-x64
3M Centers.pdb
windows7-x64
3M Centers.pdb
windows10-2004-x64
3MCentersLibrary.dll
windows7-x64
3MCentersLibrary.dll
windows10-2004-x64
3MCentersLibrary.pdb
windows7-x64
3MCentersLibrary.pdb
windows10-2004-x64
3MaterialDe...rs.dll
windows7-x64
1MaterialDe...rs.dll
windows10-2004-x64
1MaterialDe...pf.dll
windows7-x64
1MaterialDe...pf.dll
windows10-2004-x64
1MaterialDe...pf.xml
windows7-x64
3MaterialDe...pf.xml
windows10-2004-x64
1Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20241023-en -
resource tags
arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system -
submitted
20-11-2024 10:29
Static task
static1
Behavioral task
behavioral1
Sample
M Centers 8th Edition 8.0.1.3 x86.zip
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
M Centers 8th Edition 8.0.1.3 x86.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
FluentWPF.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
FluentWPF.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
M Centers.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
M Centers.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
M Centers.exe.config
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
M Centers.exe.config
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
M Centers.pdb
Resource
win7-20241010-en
Behavioral task
behavioral10
Sample
M Centers.pdb
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
MCentersLibrary.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
MCentersLibrary.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
MCentersLibrary.pdb
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
MCentersLibrary.pdb
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
MaterialDesignColors.dll
Resource
win7-20241010-en
Behavioral task
behavioral16
Sample
MaterialDesignColors.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
MaterialDesignThemes.Wpf.dll
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
MaterialDesignThemes.Wpf.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
MaterialDesignThemes.Wpf.xml
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
MaterialDesignThemes.Wpf.xml
Resource
win10v2004-20241007-en
General
-
Target
M Centers 8th Edition 8.0.1.3 x86.zip
-
Size
5.4MB
-
MD5
4e3da0bb21c0b963acefab653af34264
-
SHA1
c8051b4c267b11ec5b01db90c09b24d9b3799623
-
SHA256
c465d4f122c809bd22cdede1b082a39053f45dac204ae006760693545e4af73c
-
SHA512
c2a60fa6ba06743d4e4af3501e21f459e8dca28b4a1e9c38b41feff509d173dd8e1d00fb59cfdce50e3c2a9b09d10ba41c8ebdfd7b969f5ad8645b56e583398d
-
SSDEEP
98304:h7ERX5a05Oz8tjXaIzZQqm0pzrZM8atV4ef2KrqUrMrEDf4OPoiwjeBS7od:hgptA1AZQqmMXZyfDeUrM8oy5d
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2824 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 3 IoCs
description pid Process Token: SeRestorePrivilege 2824 7zFM.exe Token: 35 2824 7zFM.exe Token: SeSecurityPrivilege 2824 7zFM.exe -
Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 2824 7zFM.exe 2824 7zFM.exe