Analysis
- max time kernel
1362s - max time network
1151s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
30/10/2024, 03:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Win32.KeyPass.zip
Resource
win7-20241010-en
41 signatures
1800 seconds
Behavioral task
behavioral2
Sample
Win32.KeyPass.zip
Resource
win10v2004-20241007-en
2 signatures
1800 seconds
Behavioral task
behavioral3
Sample
Win32.KeyPass.zip
Resource
macos-20240711.1-en
7 signatures
1800 seconds
Behavioral task
behavioral4
Sample
Win32.KeyPass.exe
Resource
win7-20240903-en
15 signatures
1800 seconds
Behavioral task
behavioral5
Sample
Win32.KeyPass.exe
Resource
win10v2004-20241007-en
19 signatures
1800 seconds
Behavioral task
behavioral6
Sample
Win32.KeyPass.exe
Resource
macos-20240711.1-en
0 signatures
1800 seconds
General
- Target Win32.KeyPass.zip
- Size 1.3MB
- Sample241030-ehgrjsvldt
- SHA256 8f8f3834abab12ebd792487a89e45bdb8c8f41b51f232dfb3edb8e8140c9ff8f
- MD5 f831ffa7faa4da66482aa252536e1b0f
- SHA1 aa305bd6962ebf06e26462d25140691585f85341
- SHA512 3bf39aeb6c52de76aa864fb7d810cb4adbd2c7e0a2b91e8b6865967843044d628ca66a4531c720e5cd75dfb82a371e467f823819c0d9d559bd371efeec1d962a
- SSDEEP 24576:k5yq9y9qttzFVPyDcYwohuvh0GsGkjHkevwLfK4uiIP/nMPbcdKK:cH3FVP8hphuF2Hk1LfK4InMLK
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4672 7zFM.exe Token: 35 4672 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4672 7zFM.exe