Overview

overview

10

Static

static

10

241105-dtx...ed.zip

windows10-2004-x64

1

d91912b4b9...37.rar

windows10-2004-x64

1

08751be484...2d.dll

windows10-2004-x64

10

0a9f79abd4...51.exe

windows10-2004-x64

3

0di3x.exe

windows10-2004-x64

10

201106-9sx...ed.zip

windows10-2004-x64

1

2019-09-02...10.exe

windows10-2004-x64

10

2c01b00772...eb.exe

windows10-2004-x64

10

31.exe

windows10-2004-x64

10

3DMark 11 ...on.exe

windows10-2004-x64

3

42f9729255...61.exe

windows10-2004-x64

10

5da0116af4...18.exe

windows10-2004-x64

10

6306868794.bin.zip

windows10-2004-x64

1

69c56d12ed...6b.exe

windows10-2004-x64

10

905d572f23...50.exe

windows10-2004-x64

10

948340be97...54.exe

windows10-2004-x64

10

95560f1a46...f9.dll

windows10-2004-x64

5

Archive.zi...3e.exe

windows10-2004-x64

8

CVE-2018-1...oC.swf

windows10-2004-x64

3

DiskIntern...en.exe

windows10-2004-x64

3

E2-2020111...59.zip

windows10-2004-x64

1

ForceOp 2....ce.exe

windows10-2004-x64

7

HYDRA.exe

windows10-2004-x64

10

KLwC6vii.exe

windows10-2004-x64

1

Keygen.exe

windows10-2004-x64

10

Lonelyscre...ox.exe

windows10-2004-x64

3

LtHv0O2KZDK4M637.exe

windows10-2004-x64

10

Magic_File...ja.exe

windows10-2004-x64

3

Malware

windows10-2004-x64

1

REVENGE-RAT.js.zip

windows10-2004-x64

1

___ _ ____...서.gz

windows10-2004-x64

1

b2bd3de3e5...bb.zip

windows10-2004-x64

1

Resubmissions

14-12-2024 07:51

241214-jqcj1sxnhr 10

11-12-2024 15:39

241211-s3498stkar 10

07-12-2024 20:12

241207-yy4qsswqej 10

Analysis

  • max time kernel
    147s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-12-2024 01:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ___ _ _____ __ ___/전산 및 비전산자료 보존 요청서.gz

  • Size

    575KB

  • MD5

    7fb27e920c0d272d03a1b1258b81ede8

  • SHA1

    6273137ac4b396ff99b6d227e5207273b2d19fab

  • SHA256

    04eb8b5e59d657f4c00573d1d49c24932e10ad503be1a802d24c86463319764e

  • SHA512

    9924847acdf1188ab14060bad5771e01d88cff233bcf81fe83d1b795a68d4eb42316fe35c0ece66160a160669cd23ea072c0f6c50626db991d4484a45ce8cf90

  • SSDEEP

    12288:+HpIr3xwSfqKtsHsNFO9ZdX/WAYqDwrmjJwX3bdiuaRCu:jnfHyZdX/WAYQ4mjJwXVaRCu

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\___ _ _____ __ ___\전산 및 비전산자료 보존 요청서.gz"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:4272

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads