Analysis
-
max time kernel
694s -
max time network
1152s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system -
submitted
12/10/2024, 16:22
Static task
static1
Behavioral task
behavioral1
Sample
PAID AIMBOT PC PANNEL.exe.zip
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
PAID AIMBOT PC PANNEL.exe.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
PAID AIMBOT PC PANNEL.exe.zip
Resource
win11-20241007-en
General
-
Target
PAID AIMBOT PC PANNEL.exe.zip
-
Size
631KB
-
MD5
0ccf0dd08e7ceca2a9ba77c0e61fbe87
-
SHA1
bce3f16b9fc73860e566e2b5d459ec12944b927e
-
SHA256
2edbe4c79247e2a723d676007129c4d6562408aba33b3d615bbb2bcf05843049
-
SHA512
5c90762b1c80f86627ab52035e7818405232767ca7f22d9a7ab5ea899b00388536c44f3a463cb44273af84d71cf7faf7275a164c9b6a45e8a528599dc0dada26
-
SSDEEP
12288:yppiYSDUHZL7bYIMhBxqIVTao2iJGg6c8sUpcVmwG+5imRVCGMdwssFMvjIVq7B:1YSy/bYIuBfB8MGfsUpcVpRimRXFTeIy
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3124 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3124 7zFM.exe Token: 35 3124 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3124 7zFM.exe