Overview
overview
7Static
static
3TeddyPcFiles.rar
windows7-x64
1TeddyPcFiles.rar
windows10-2004-x64
1TeddyPcFil...n).exe
windows7-x64
7TeddyPcFil...n).exe
windows10-2004-x64
7TeddyPcApi...ts.pyc
windows7-x64
3TeddyPcApi...ts.pyc
windows10-2004-x64
3main.pyc
windows7-x64
3main.pyc
windows10-2004-x64
3TeddyPcFil...g.json
windows7-x64
3TeddyPcFil...g.json
windows10-2004-x64
3TeddyPcFil...b.json
windows7-x64
3TeddyPcFil...b.json
windows10-2004-x64
3Analysis
-
max time kernel
95s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
28-12-2024 01:49
Behavioral task
behavioral1
Sample
TeddyPcFiles.rar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
TeddyPcFiles.rar
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
TeddyPcFiles/Teddy PC (main).exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
TeddyPcFiles/Teddy PC (main).exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
TeddyPcApiRequests.pyc
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
TeddyPcApiRequests.pyc
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
main.pyc
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
main.pyc
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
TeddyPcFiles/config.json
Resource
win7-20241010-en
Behavioral task
behavioral10
Sample
TeddyPcFiles/config.json
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
TeddyPcFiles/saved_account_db.json
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
TeddyPcFiles/saved_account_db.json
Resource
win10v2004-20241007-en
General
-
Target
TeddyPcFiles.rar
-
Size
15.0MB
-
MD5
fbe70824eab9c5a596384ffeca5858b9
-
SHA1
7da37b0839d96c8442e2680ca197eee357c65de6
-
SHA256
6fa8356f35968afc15ecb036d17e197dfc310fcd5a42fa952183bd4b5a37fc36
-
SHA512
c11fd2c598199370d61989ab8b21ac6fa8c067ae15bfc2f98bdb0915ae6d43df80ac511169f5abb7d5a384a6527cdac060cd034773df2723791f7a1ee5b00ef5
-
SSDEEP
196608:NvsTyJvgyfFvTi5PrYeaDTgT/QSpMDJuMQg6u/LrBD+KbOInvx8T7vA9BhKM8n:knGcEea3+/ZpCJAYDfOAu7qTKh
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1084 7zFM.exe Token: 35 1084 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1084 7zFM.exe