Resubmissions
07/02/2026, 08:09
260207-j2gywahy3c305/09/2025, 03:39
250905-d7llcsvvg1322/07/2025, 13:54
250722-q7jszscp3v1022/07/2025, 13:49
250722-q41x4awwdv301/11/2024, 12:33
241101-pradyaypdv1027/10/2024, 23:08
241027-24hmasskhj1020/10/2024, 16:28
241020-tyzdvsxgqb320/10/2024, 16:26
241020-tx2gtszekk306/10/2024, 17:53
241006-wgrzka1eme02/10/2024, 11:53
241002-n2j6fsycqb3Analysis
- max time kernel
16s - max time network
21s - platform
windows10-1703_x64 - resource
win10-20240404-en - resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system - submitted
20/10/2024, 16:26
Static task
static1
Behavioral task
behavioral1
Sample
230823-139hyshd3w_pw_infected.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
230823-139hyshd3w_pw_infected.zip
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
230823-139hyshd3w_pw_infected.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral4
Sample
230823-139hyshd3w_pw_infected.zip
Resource
win11-20241007-en
Behavioral task
behavioral5
Sample
dl2.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral6
Sample
dl2.exe
Resource
win10-20240611-en
Behavioral task
behavioral7
Sample
dl2.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral8
Sample
dl2.exe
Resource
win11-20241007-en
General
- Target 230823-139hyshd3w_pw_infected.zip
- Size 472KB
- Sample241020-tx2gtszekk
- SHA256 8ef176944e54df85db028979ceb66b2b6e807b1615f4254c273d4b433caec0dd
- MD5 e3af7d1463d266e02cd03ea7a3add2e4
- SHA1 6456c0de00c86db5e7d061fbf7e19792d3dbbc4a
- SHA512 855e4ba5316a800113f6f410d37ba7e981c0f72bb23664c26e464777f2a0a96d8f651e77189af89e70be9d032a3a1b7b40b005bd60b9f6dc792c7588b3a8d9bb
- SSDEEP 12288:ABgmK1z0D2TuzS4cu2LH6WhBO8RiKrDmlPPoSdERZIhp4TWo3:2BKqSt4AH6Whc2fqPoSdEDRWo3
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4228 7zFM.exe Token: 35 4228 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4228 7zFM.exe