Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
29-10-2024 15:46
Static task
static1
Behavioral task
behavioral1
Sample
Browser_Update-10-2024.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Browser_Update-10-2024.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Install.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Install.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
d3d11.dll
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
d3d11.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
lib
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
lib
Resource
win10v2004-20241007-en
General
-
Target
Browser_Update-10-2024.zip
-
Size
74.8MB
-
MD5
b965f86a0c6077967f0b310a0419ba01
-
SHA1
11da78837200eb425544580bb5533dd3d39932b3
-
SHA256
2a7a93984ebb6f2676eaf4bb61b29935e0fbb4da166cb252e9747f779074ae62
-
SHA512
db4448a99b7383ed58fa89da422f0da026f80069fc55a4255314cedc86820e3a41d90fc13b842c785a22c836792cfce6cab22fb5f2de62b7c9fc0d6d287258d2
-
SSDEEP
1572864:0dMtMaMKFU4lwtu48BTIfjUvbVm/fAUfrnDNsikdo92xvwDrZ9Y:6MtnMKFflwj8tIUVqAUfrDSip2xvw/Zy
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1600 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1600 7zFM.exe Token: 35 1600 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1600 7zFM.exe