Analysis

  • max time kernel
    133s
  • max time network
    135s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    14/10/2024, 13:32

General

  • Target

    𓃗-❀#❀La-te-st-❀-Se-t-up-❀-Pas$-》》#❀9192❀#-𓃗/𓃗-❀#❀La-te-st-❀-Se-t-up-οΏ½.rar

  • Size

    23.7MB

  • MD5

    453516c93ee14a1302b1b698aee44080

  • SHA1

    7b7c9a7e7d6e623f5ef400db8852a83ea31484ba

  • SHA256

    a01f2ed439a4ba884a543520ef64fdea5e6281a68659d247f08f9d11ce4f5ba5

  • SHA512

    1e0f97f6bcb7b6a3d8a8086d17164ae6fe8219bf75be15e72baf921f30961b779ad11ebedb6cd0cd6ad3f400abf18bc17f69a7fe25d8d37f7e17e678bd3a5654

  • SSDEEP

    393216:lztJGmX15JNwhLt3AKRybrW4JE434pwk4uQyDjTedF0V4YFIfBulDr5SOFDle6sX:lBJGKNwxiVTmnwj3+jC1fADtfFDle6sX

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\𓃗-❀#❀La-te-st-❀-Se-t-up-❀-Pas$-》》#❀9192❀#-𓃗\𓃗-❀#❀La-te-st-❀-Se-t-up-οΏ½.rar"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:1768

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads