Overview
overview
8Static
static
3DeltaExecutor.zip
windows7-x64
1DeltaExecutor.zip
windows10-2004-x64
1DeltaExecutor.exe
windows7-x64
8DeltaExecutor.exe
windows10-2004-x64
8System.Col...ns.dll
windows7-x64
1System.Col...ns.dll
windows10-2004-x64
1System.Com...es.dll
windows7-x64
1System.Com...es.dll
windows10-2004-x64
1System.Console.dll
windows7-x64
1System.Console.dll
windows10-2004-x64
1System.Dia...ss.dll
windows7-x64
1System.Dia...ss.dll
windows10-2004-x64
1System.Linq.dll
windows7-x64
1System.Linq.dll
windows10-2004-x64
1System.Memory.dll
windows7-x64
1System.Memory.dll
windows10-2004-x64
1System.Pri...ib.dll
windows7-x64
1System.Pri...ib.dll
windows10-2004-x64
1System.Run...es.dll
windows7-x64
1System.Run...es.dll
windows10-2004-x64
1System.Runtime.dll
windows7-x64
1System.Runtime.dll
windows10-2004-x64
1System.Tex...ns.dll
windows7-x64
1System.Tex...ns.dll
windows10-2004-x64
1System.Thr...ad.dll
windows7-x64
1System.Thr...ad.dll
windows10-2004-x64
1System.Threading.dll
windows7-x64
1System.Threading.dll
windows10-2004-x64
1WinUpdateH...s.json
windows7-x64
3WinUpdateH...s.json
windows10-2004-x64
3WinUpdateHelper.exe
windows7-x64
1WinUpdateHelper.exe
windows10-2004-x64
1Resubmissions
01-01-2025 20:08
250101-yw3eystrcl 801-01-2025 20:04
250101-ytbt8a1qe1 801-01-2025 20:01
250101-yrhvra1pgx 801-01-2025 14:10
250101-rgpf8axnaw 10Analysis
-
max time kernel
95s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
01-01-2025 20:01
Static task
static1
Behavioral task
behavioral1
Sample
DeltaExecutor.zip
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
DeltaExecutor.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
DeltaExecutor.exe
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
DeltaExecutor.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
System.Collections.dll
Resource
win7-20241023-en
Behavioral task
behavioral6
Sample
System.Collections.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
System.ComponentModel.Primitives.dll
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
System.ComponentModel.Primitives.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
System.Console.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
System.Console.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
System.Diagnostics.Process.dll
Resource
win7-20241010-en
Behavioral task
behavioral12
Sample
System.Diagnostics.Process.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
System.Linq.dll
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
System.Linq.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
System.Memory.dll
Resource
win7-20240729-en
Behavioral task
behavioral16
Sample
System.Memory.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
System.Private.CoreLib.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
System.Private.CoreLib.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
System.Runtime.InteropServices.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
System.Runtime.InteropServices.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
System.Runtime.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
System.Runtime.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
System.Text.Encoding.Extensions.dll
Resource
win7-20241010-en
Behavioral task
behavioral24
Sample
System.Text.Encoding.Extensions.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
System.Threading.Thread.dll
Resource
win7-20241010-en
Behavioral task
behavioral26
Sample
System.Threading.Thread.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
System.Threading.dll
Resource
win7-20240729-en
Behavioral task
behavioral28
Sample
System.Threading.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
WinUpdateHelper.deps.json
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
WinUpdateHelper.deps.json
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
WinUpdateHelper.exe
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
WinUpdateHelper.exe
Resource
win10v2004-20241007-en
General
-
Target
DeltaExecutor.zip
-
Size
8.7MB
-
MD5
0fe9527ce6a6464c8417949dca101972
-
SHA1
92e3d746ef23e80ecdee68910b64030bddaa7a9a
-
SHA256
d9029d87aae61f32f6ea1f9bace4b63671b89d07ff8173e376d4054078c19669
-
SHA512
39914909702417bfae6e411d2c59acc294961e8a722a87862301f997dcf3ae3a535681045b68e5b79bd970bdae428ca5c1aa33c5115195a919622e6265c6163d
-
SSDEEP
196608:E0kiwudGHZV4uYmFg7zf2yEC3axVsqFckd1/r81uMRZKI81oeI:EGA56u1G7wCKLzd1/rORZKId
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4676 7zFM.exe Token: 35 4676 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4676 7zFM.exe