Overview
overview
10Static
static
107zSCD97F9B...72.exe
windows7-x64
7zSCD97F9B...72.exe
windows10-2004-x64
7zSCD97F9B...28.exe
windows7-x64
7zSCD97F9B...28.exe
windows10-2004-x64
7zSCD97F9B...82.exe
windows7-x64
7zSCD97F9B...82.exe
windows10-2004-x64
7zSCD97F9B...7c.exe
windows7-x64
37zSCD97F9B...7c.exe
windows10-2004-x64
77zSCD97F9B...08.exe
windows7-x64
77zSCD97F9B...08.exe
windows10-2004-x64
77zSCD97F9B...5c.exe
windows7-x64
67zSCD97F9B...5c.exe
windows10-2004-x64
37zSCD97F9B...51.exe
windows7-x64
107zSCD97F9B...51.exe
windows10-2004-x64
107zSCD97F9B...09.exe
windows7-x64
17zSCD97F9B...09.exe
windows10-2004-x64
17zSCD97F9B...cd.exe
windows7-x64
67zSCD97F9B...cd.exe
windows10-2004-x64
67zSCD97F9B...9d.exe
windows7-x64
37zSCD97F9B...9d.exe
windows10-2004-x64
37zSCD97F9B...69.exe
windows7-x64
87zSCD97F9B...69.exe
windows10-2004-x64
87zSCD97F9B...5c.exe
windows7-x64
67zSCD97F9B...5c.exe
windows10-2004-x64
67zSCD97F9B...57.exe
windows7-x64
107zSCD97F9B...57.exe
windows10-2004-x64
107zSCD97F9B...00.exe
windows7-x64
37zSCD97F9B...00.exe
windows10-2004-x64
37zSCD97F9B...61.exe
windows7-x64
97zSCD97F9B...61.exe
windows10-2004-x64
97zSCD97F9B...rl.dll
windows7-x64
37zSCD97F9B...rl.dll
windows10-2004-x64
3Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
25-12-2024 13:36
Behavioral task
behavioral1
Sample
7zSCD97F9B7/16409730233472.exe
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral2
Sample
7zSCD97F9B7/16409730233472.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
7zSCD97F9B7/16409730238228.exe
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral4
Sample
7zSCD97F9B7/16409730238228.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
7zSCD97F9B7/1640973023982.exe
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral6
Sample
7zSCD97F9B7/1640973023982.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
7zSCD97F9B7/61cf42cab6116_Fri1740da7b7c.exe
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral8
Sample
7zSCD97F9B7/61cf42cab6116_Fri1740da7b7c.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
7zSCD97F9B7/61cf42cc94cfd_Fri174cd2108.exe
Resource
win7-20241023-en
windows7-x64
Behavioral task
behavioral10
Sample
7zSCD97F9B7/61cf42cc94cfd_Fri174cd2108.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
7zSCD97F9B7/61cf42cd9d3e3_Fri172b3fcd2f5c.exe
Resource
win7-20240729-en
windows7-x64
Behavioral task
behavioral12
Sample
7zSCD97F9B7/61cf42cd9d3e3_Fri172b3fcd2f5c.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
7zSCD97F9B7/61cf42cf81412_Fri1748d73b51.exe
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral14
Sample
7zSCD97F9B7/61cf42cf81412_Fri1748d73b51.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
7zSCD97F9B7/61cf42d8cfbf4_Fri175590209.exe
Resource
win7-20241023-en
windows7-x64
Behavioral task
behavioral16
Sample
7zSCD97F9B7/61cf42d8cfbf4_Fri175590209.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
7zSCD97F9B7/61cf42d96bbd5_Fri1768e6cd.exe
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral18
Sample
7zSCD97F9B7/61cf42d96bbd5_Fri1768e6cd.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
7zSCD97F9B7/61cf42da3aadc_Fri1749497d9d.exe
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral20
Sample
7zSCD97F9B7/61cf42da3aadc_Fri1749497d9d.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
7zSCD97F9B7/61cf42db8e020_Fri179863c92d69.exe
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral22
Sample
7zSCD97F9B7/61cf42db8e020_Fri179863c92d69.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
7zSCD97F9B7/61cf42dc105f3_Fri17e8bf67cf5c.exe
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral24
Sample
7zSCD97F9B7/61cf42dc105f3_Fri17e8bf67cf5c.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
7zSCD97F9B7/61cf42ddca121_Fri1754a29da57.exe
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral26
Sample
7zSCD97F9B7/61cf42ddca121_Fri1754a29da57.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
7zSCD97F9B7/61cf42de1af96_Fri179a299200.exe
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral28
Sample
7zSCD97F9B7/61cf42de1af96_Fri179a299200.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
7zSCD97F9B7/61cf42df34a5e_Fri1721957b061.exe
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral30
Sample
7zSCD97F9B7/61cf42df34a5e_Fri1721957b061.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
7zSCD97F9B7/libcurl.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral32
Sample
7zSCD97F9B7/libcurl.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
General
-
Target
7zSCD97F9B7/61cf42d96bbd5_Fri1768e6cd.exe
-
Size
8KB
-
MD5
d7f55160e4884c2917c39d3ae7f618b3
-
SHA1
b8b48396d98f492c98f8c5f9ca88ef32f9d47033
-
SHA256
4b8d0340ceb7fe26b41c04c590bb68791865274132f73b0cd59265f3c63d96c8
-
SHA512
af49101f633a964b54fa3e8baf2d97bc0cade00f5087dd51b1b281991f808a82359664b36e3450662ff3fbd5ee9dd6ccebde547d14f15ee09ffee909124544a6
-
SSDEEP
96:MJOunDNLXqqCWV2sLZSukdrKozt1HfWP5KczNt:W2qH3LGr3H+Im
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 30 IoCs
flow ioc 30 iplogger.org 33 iplogger.org 6 iplogger.org 7 iplogger.org 8 iplogger.org 22 iplogger.org 26 iplogger.org 5 iplogger.org 11 iplogger.org 14 iplogger.org 28 iplogger.org 9 iplogger.org 16 iplogger.org 19 iplogger.org 20 iplogger.org 21 iplogger.org 25 iplogger.org 31 iplogger.org 4 iplogger.org 17 iplogger.org 24 iplogger.org 29 iplogger.org 10 iplogger.org 23 iplogger.org 27 iplogger.org 12 iplogger.org 13 iplogger.org 15 iplogger.org 18 iplogger.org 32 iplogger.org -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2492 61cf42d96bbd5_Fri1768e6cd.exe