b64a353728226d46f333f6025cc55fcb222191161396e3702c7a536618c80c97 | Triage

Analysis

max time kernel
119s
max time network
126s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
27-10-2024 18:34

Sharing

Report Analysis Logs

General

Target

ExxxxSet_up.zip
Size

26.0MB
MD5

338e1f5d34876aedc2f00521b642049a
SHA1

67af0b475e407890f6b57351d3b18456f4735466
SHA256

6ae598b5c7e9c3a0e673c292533a3185fe25bd56261f2803ef0bf8b4c3f06b7d
SHA512

55e71f20dda7fe1c4ee29bd48c3f0b01db538165193f94b195d7f2d9e4ef290c6421d3d5b520dde3e0e449ad8e02ed89c27ea198dfc796c6b9073ad594b5351c
SSDEEP

786432:k6oivzkdQhFEk6jGyR6nNwKQfmJ1ki60G2feO8zth:kD6zkd8v/u6m/GkiRG5th

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2272	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	2272	7zFM.exe
Token: 35	2272	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2272	7zFM.exe

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\ExxxxSet_up.zip"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:2272

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads