Overview

overview

1

Static

static

1

42.zip

windows7-x64

1

42.zip

windows10-2004-x64

1

Analysis

  • max time kernel
    142s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-11-2023 17:47

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    42.zip

  • Size

    41KB

  • MD5

    1df9a18b18332f153918030b7b516615

  • SHA1

    6c42c62696616b72bbfc88a4be4ead57aa7bc503

  • SHA256

    bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa

  • SHA512

    6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80

  • SSDEEP

    768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 8 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\42.zip
    1⤵
      PID:3436
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:3748
      • C:\Program Files\7-Zip\7zG.exe
        "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\AppData\Local\Temp\42\" -ad -an -ai#7zMap16694:84:7zEvent23024
        1⤵
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        PID:4176
      • C:\Program Files\7-Zip\7zG.exe
        "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\AppData\Local\Temp\42\" -an -ai#7zMap3040:1506:7zEvent16911
        1⤵
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        PID:4832

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\42\book 2.zip
        Filesize

        28KB

        MD5

        38605a41eda691b378c8304bf914c777

        SHA1

        75f2667ccacce7c7947c186dca5029ffee720c01

        SHA256

        f791bea6d653eddcaf8be57e45b698e75f105e28a20c50f519ad43a2b2e27b2a

        SHA512

        d1876ebad38543260b3c4a2b83b69546da52b093f459890835ad02ea65ea712e91f40c5bf9ae0313fa2f4fec303cea2348c5272a4ac70088d1dbffb7d5163374

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\42\lib 0.zip
        Filesize

        34KB

        MD5

        0a76bd3e26768bba68aca3d210997069

        SHA1

        753690994a18cf58ed0fe3749d16448b763047b8

        SHA256

        9056b87f079861d1b0f041317d6415927d9ffb6498ce2530ff90fda69fa64e78

        SHA512

        14408ea7f44bc365a58d7480fff9ea3b10fa21bfbd3363c6e30b74a4d4121677e20ce1108cce12c203f0760768aee1c1aa69b130e090c409f9a516ea02d70c49

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\42\lib 1.zip
        Filesize

        34KB

        MD5

        0a76bd3e26768bba68aca3d210997069

        SHA1

        753690994a18cf58ed0fe3749d16448b763047b8

        SHA256

        9056b87f079861d1b0f041317d6415927d9ffb6498ce2530ff90fda69fa64e78

        SHA512

        14408ea7f44bc365a58d7480fff9ea3b10fa21bfbd3363c6e30b74a4d4121677e20ce1108cce12c203f0760768aee1c1aa69b130e090c409f9a516ea02d70c49

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\42\lib 2.zip
        Filesize

        34KB

        MD5

        0a76bd3e26768bba68aca3d210997069

        SHA1

        753690994a18cf58ed0fe3749d16448b763047b8

        SHA256

        9056b87f079861d1b0f041317d6415927d9ffb6498ce2530ff90fda69fa64e78

        SHA512

        14408ea7f44bc365a58d7480fff9ea3b10fa21bfbd3363c6e30b74a4d4121677e20ce1108cce12c203f0760768aee1c1aa69b130e090c409f9a516ea02d70c49

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\42\lib 2.zip
        Filesize

        34KB

        MD5

        0a76bd3e26768bba68aca3d210997069

        SHA1

        753690994a18cf58ed0fe3749d16448b763047b8

        SHA256

        9056b87f079861d1b0f041317d6415927d9ffb6498ce2530ff90fda69fa64e78

        SHA512

        14408ea7f44bc365a58d7480fff9ea3b10fa21bfbd3363c6e30b74a4d4121677e20ce1108cce12c203f0760768aee1c1aa69b130e090c409f9a516ea02d70c49

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\42\lib 3.zip
        Filesize

        34KB

        MD5

        0a76bd3e26768bba68aca3d210997069

        SHA1

        753690994a18cf58ed0fe3749d16448b763047b8

        SHA256

        9056b87f079861d1b0f041317d6415927d9ffb6498ce2530ff90fda69fa64e78

        SHA512

        14408ea7f44bc365a58d7480fff9ea3b10fa21bfbd3363c6e30b74a4d4121677e20ce1108cce12c203f0760768aee1c1aa69b130e090c409f9a516ea02d70c49

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\42\lib 4.zip
        Filesize

        34KB

        MD5

        0a76bd3e26768bba68aca3d210997069

        SHA1

        753690994a18cf58ed0fe3749d16448b763047b8

        SHA256

        9056b87f079861d1b0f041317d6415927d9ffb6498ce2530ff90fda69fa64e78

        SHA512

        14408ea7f44bc365a58d7480fff9ea3b10fa21bfbd3363c6e30b74a4d4121677e20ce1108cce12c203f0760768aee1c1aa69b130e090c409f9a516ea02d70c49

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\42\lib 5.zip
        Filesize

        34KB

        MD5

        0a76bd3e26768bba68aca3d210997069

        SHA1

        753690994a18cf58ed0fe3749d16448b763047b8

        SHA256

        9056b87f079861d1b0f041317d6415927d9ffb6498ce2530ff90fda69fa64e78

        SHA512

        14408ea7f44bc365a58d7480fff9ea3b10fa21bfbd3363c6e30b74a4d4121677e20ce1108cce12c203f0760768aee1c1aa69b130e090c409f9a516ea02d70c49

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\42\lib 6.zip
        Filesize

        34KB

        MD5

        0a76bd3e26768bba68aca3d210997069

        SHA1

        753690994a18cf58ed0fe3749d16448b763047b8

        SHA256

        9056b87f079861d1b0f041317d6415927d9ffb6498ce2530ff90fda69fa64e78

        SHA512

        14408ea7f44bc365a58d7480fff9ea3b10fa21bfbd3363c6e30b74a4d4121677e20ce1108cce12c203f0760768aee1c1aa69b130e090c409f9a516ea02d70c49

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\42\lib 7.zip
        Filesize

        34KB

        MD5

        0a76bd3e26768bba68aca3d210997069

        SHA1

        753690994a18cf58ed0fe3749d16448b763047b8

        SHA256

        9056b87f079861d1b0f041317d6415927d9ffb6498ce2530ff90fda69fa64e78

        SHA512

        14408ea7f44bc365a58d7480fff9ea3b10fa21bfbd3363c6e30b74a4d4121677e20ce1108cce12c203f0760768aee1c1aa69b130e090c409f9a516ea02d70c49

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\42\lib 8.zip
        Filesize

        34KB

        MD5

        0a76bd3e26768bba68aca3d210997069

        SHA1

        753690994a18cf58ed0fe3749d16448b763047b8

        SHA256

        9056b87f079861d1b0f041317d6415927d9ffb6498ce2530ff90fda69fa64e78

        SHA512

        14408ea7f44bc365a58d7480fff9ea3b10fa21bfbd3363c6e30b74a4d4121677e20ce1108cce12c203f0760768aee1c1aa69b130e090c409f9a516ea02d70c49

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\42\lib 9.zip
        Filesize

        34KB

        MD5

        0a76bd3e26768bba68aca3d210997069

        SHA1

        753690994a18cf58ed0fe3749d16448b763047b8

        SHA256

        9056b87f079861d1b0f041317d6415927d9ffb6498ce2530ff90fda69fa64e78

        SHA512

        14408ea7f44bc365a58d7480fff9ea3b10fa21bfbd3363c6e30b74a4d4121677e20ce1108cce12c203f0760768aee1c1aa69b130e090c409f9a516ea02d70c49

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\42\lib a.zip
        Filesize

        34KB

        MD5

        0a76bd3e26768bba68aca3d210997069

        SHA1

        753690994a18cf58ed0fe3749d16448b763047b8

        SHA256

        9056b87f079861d1b0f041317d6415927d9ffb6498ce2530ff90fda69fa64e78

        SHA512

        14408ea7f44bc365a58d7480fff9ea3b10fa21bfbd3363c6e30b74a4d4121677e20ce1108cce12c203f0760768aee1c1aa69b130e090c409f9a516ea02d70c49

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\42\lib b.zip
        Filesize

        34KB

        MD5

        0a76bd3e26768bba68aca3d210997069

        SHA1

        753690994a18cf58ed0fe3749d16448b763047b8

        SHA256

        9056b87f079861d1b0f041317d6415927d9ffb6498ce2530ff90fda69fa64e78

        SHA512

        14408ea7f44bc365a58d7480fff9ea3b10fa21bfbd3363c6e30b74a4d4121677e20ce1108cce12c203f0760768aee1c1aa69b130e090c409f9a516ea02d70c49

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\42\lib c.zip
        Filesize

        34KB

        MD5

        0a76bd3e26768bba68aca3d210997069

        SHA1

        753690994a18cf58ed0fe3749d16448b763047b8

        SHA256

        9056b87f079861d1b0f041317d6415927d9ffb6498ce2530ff90fda69fa64e78

        SHA512

        14408ea7f44bc365a58d7480fff9ea3b10fa21bfbd3363c6e30b74a4d4121677e20ce1108cce12c203f0760768aee1c1aa69b130e090c409f9a516ea02d70c49

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\42\lib d.zip
        Filesize

        34KB

        MD5

        0a76bd3e26768bba68aca3d210997069

        SHA1

        753690994a18cf58ed0fe3749d16448b763047b8

        SHA256

        9056b87f079861d1b0f041317d6415927d9ffb6498ce2530ff90fda69fa64e78

        SHA512

        14408ea7f44bc365a58d7480fff9ea3b10fa21bfbd3363c6e30b74a4d4121677e20ce1108cce12c203f0760768aee1c1aa69b130e090c409f9a516ea02d70c49

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\42\lib e.zip
        Filesize

        34KB

        MD5

        0a76bd3e26768bba68aca3d210997069

        SHA1

        753690994a18cf58ed0fe3749d16448b763047b8

        SHA256

        9056b87f079861d1b0f041317d6415927d9ffb6498ce2530ff90fda69fa64e78

        SHA512

        14408ea7f44bc365a58d7480fff9ea3b10fa21bfbd3363c6e30b74a4d4121677e20ce1108cce12c203f0760768aee1c1aa69b130e090c409f9a516ea02d70c49

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\42\lib f.zip
        Filesize

        34KB

        MD5

        0a76bd3e26768bba68aca3d210997069

        SHA1

        753690994a18cf58ed0fe3749d16448b763047b8

        SHA256

        9056b87f079861d1b0f041317d6415927d9ffb6498ce2530ff90fda69fa64e78

        SHA512

        14408ea7f44bc365a58d7480fff9ea3b10fa21bfbd3363c6e30b74a4d4121677e20ce1108cce12c203f0760768aee1c1aa69b130e090c409f9a516ea02d70c49

        Download Submit