Overview

overview

1

Static

static

1

RNSM00436.7z

windows7-x64

1

RNSM00436.7z

windows10-2004-x64

1

Resubmissions

05/02/2025, 09:03

250205-k1deqszkaz1

05/02/2025, 06:26

250205-g68w2svrfq1

28/10/2024, 00:19

241028-al8bfswbrc3

27/10/2024, 06:22

241027-g46znsslhr1

26/10/2024, 10:54

241026-mzm9natclb3

25/10/2024, 21:14

241025-z3q6yavdmb10

Analysis

  • max time kernel
    134s
  • max time network
    131s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/10/2024, 06:22

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    RNSM00436.7z
  • Size 70.2MB
  • Sample241027-g46znsslhr
  • SHA256 54efded0c82f76a168ee6aa0fbf96f54693eb1d1c1b12c6a733ceb24d40c497e
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\RNSM00436.7z"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:1676

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads