Analysis
-
max time kernel
133s -
max time network
135s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
14/10/2024, 13:32
Static task
static1
Behavioral task
behavioral1
Sample
π-β#βLa-te-st-β-Se-t-up-β-Pas$-γγ#β9192β#-π.zip
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
π-β#βLa-te-st-β-Se-t-up-β-Pas$-γγ#β9192β#-π/π-β#βLa-te-st-β-Se-t-up-οΏ½.rar
Resource
win10-20240404-en
General
-
Target
π-β#βLa-te-st-β-Se-t-up-β-Pas$-γγ#β9192β#-π/π-β#βLa-te-st-β-Se-t-up-οΏ½.rar
-
Size
23.7MB
-
MD5
453516c93ee14a1302b1b698aee44080
-
SHA1
7b7c9a7e7d6e623f5ef400db8852a83ea31484ba
-
SHA256
a01f2ed439a4ba884a543520ef64fdea5e6281a68659d247f08f9d11ce4f5ba5
-
SHA512
1e0f97f6bcb7b6a3d8a8086d17164ae6fe8219bf75be15e72baf921f30961b779ad11ebedb6cd0cd6ad3f400abf18bc17f69a7fe25d8d37f7e17e678bd3a5654
-
SSDEEP
393216:lztJGmX15JNwhLt3AKRybrW4JE434pwk4uQyDjTedF0V4YFIfBulDr5SOFDle6sX:lBJGKNwxiVTmnwj3+jC1fADtfFDle6sX
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1768 7zFM.exe Token: 35 1768 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1768 7zFM.exe
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\π-β#βLa-te-st-β-Se-t-up-β-Pas$-γγ#β9192β#-π\π-β#βLa-te-st-β-Se-t-up-οΏ½.rar"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:1768