Analysis
- max time kernel
148s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
29/10/2024, 01:33
Behavioral task
behavioral1
Sample
a1e27a757f65ac895bb2c520b944837b.zip
Resource
win7-20240903-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
a1e27a757f65ac895bb2c520b944837b.zip
Resource
win10v2004-20241007-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
9dae1574a1634b33d1de940881b82ae613017ee7895e996054df1df348414d42.elf
Resource
ubuntu1804-amd64-20240611-en
0 signatures
150 seconds
General
- Target a1e27a757f65ac895bb2c520b944837b.zip
- Size 21KB
- Sample241029-byncgssdmk
- SHA256 c1bb22293e0092b0e3706403aac7a6f71fbf51da335648f767a02ccbd2a07f25
- MD5 04eda9ad67ddfb30fe47aaf24659af4f
- SHA1 86caac32a46cb0d8d325921e9f08dc34c7c512f5
- SHA512 f36de649615690be2c2e2d245b200d8c804b077fcd00925b6484e87e82d50c599457cb112d87f2bacd5a74f10b119e97b35dcd14dd14c598245c855017088fe6
- SSDEEP 384:CF4I1pZzBsNa540a5wErN3SYW8g0bhqvkkjy3xhqEFUT9KXw7gP/Ub6OpU/:mZzC0a5wYN3SGg0bhq7+XCo+gP/UOOp0
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3336 7zFM.exe Token: 35 3336 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3336 7zFM.exe