Resubmissions

30-10-2024 05:34

241030-f9ksysxepe 3

30-10-2024 05:32

241030-f8d9saxenb 3

30-10-2024 05:21

241030-f12ecaymam 7

Analysis

  • max time kernel
    1469s
  • max time network
    1483s
  • platform
    windows11-21h2_x64
  • resource
    win11-20241007-en
  • resource tags

    arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    30-10-2024 05:34

General

  • Target

    -↑-LaTesT🟈SeTuP🟈pAsS🟈oPeN🟈9192-↑-.zip

  • Size

    21.5MB

  • MD5

    a2ac80da3aa940b04876356020ccaa99

  • SHA1

    4d1f5b6885570faeee71ae1865748b84deee26d7

  • SHA256

    9a5c41bbbd43bca03c028622e12c5070ba9d1ac0756ae2cf93d2974a483bb0cb

  • SHA512

    eecac18345927eb3c917ecfeeb0ce85623157f3103a7cd39687a02d5ba0088cd32a746846e0dcf9ab5609503e8db6448fdb369ce3fc75f10ae87bbd7c26be5e3

  • SSDEEP

    393216:hpLAOwIyM4Wfkqem5bbAbZByI60ED6Ad0+U8dxk10OnrDVarQ9FB:bAOhyMTfzPbkiIDu6wpU8dxktrRnN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\-↑-LaTesT🟈SeTuP🟈pAsS🟈oPeN🟈9192-↑-.zip"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:396

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads