Overview

overview

10

Static

static

1

17193228024.zip

windows7-x64

1

17193228024.zip

windows10-2004-x64

10

Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    09-05-2024 10:06

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    17193228024.zip

  • Size

    44KB

  • MD5

    6b887c3c71500c05ff228fc10793795a

  • SHA1

    28eb382ed84e04b3686b799307cfeaef65432b35

  • SHA256

    609b846da03d889d71b895ab6dd025642066a3b641b48c6486d5443c68f34d7e

  • SHA512

    0c2999aa72db279df70ddd78c163b4c1ceddf5f0899a481f838ef839ae4c6aa54908a403bb48666595cdf84ff4f15e04037814e509fa9c0a2c1d15c6c6fde1b4

  • SSDEEP

    768:xyeNSvA/nu2hzTNstgGmunfvaQRoih6rznDUyyXQSAxeLGt3Kfkgii+XMKB0xdd:x5NH/u2NUgcHaQRod3DkQ9Faf5Sep

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 3 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\17193228024.zip
    1⤵
      PID:768
    • C:\Windows\system32\verclsid.exe
      "C:\Windows\system32\verclsid.exe" /S /C {0B2C9183-C9FA-4C53-AE21-C900B0C39965} /I {0C733A8A-2A1C-11CE-ADE5-00AA0044773D} /X 0x401
      1⤵
        PID:2588
      • C:\Program Files\7-Zip\7zFM.exe
        "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\17193228024.zip"
        1⤵
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        PID:2804
      • C:\Windows\System32\WScript.exe
        "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Desktop\c989926eb17a83e10fa18a7beb6e1a468c88740e157609db9dd7600498f6c148.vbs"
        1⤵
          PID:2468

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\Desktop\c989926eb17a83e10fa18a7beb6e1a468c88740e157609db9dd7600498f6c148.vbs
          Filesize

          451KB

          MD5

          50dd276ecb219b58afb8dd4c72921930

          SHA1

          6900dcdd573f4261e32ee98f8e15817ea5b17c94

          SHA256

          c989926eb17a83e10fa18a7beb6e1a468c88740e157609db9dd7600498f6c148

          SHA512

          3639ec354ce49229d31fc662c97b50d233203c23571d7cb8b57cd7d42cef62afce629b9237a7e263e9986501a49c6cdaa7597a430f62ffc590830d4354e30f1c

          Download Submit