Resubmissions
30-10-2024 05:34
241030-f9ksysxepe 330-10-2024 05:32
241030-f8d9saxenb 330-10-2024 05:21
241030-f12ecaymam 7Analysis
-
max time kernel
1469s -
max time network
1483s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system -
submitted
30-10-2024 05:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
-↑-LaTesT🟈SeTuP🟈pAsS🟈oPeN🟈9192-↑-.zip
Resource
win11-20241007-en
windows11-21h2-x64
3 signatures
1800 seconds
General
-
Target
-↑-LaTesT🟈SeTuP🟈pAsS🟈oPeN🟈9192-↑-.zip
-
Size
21.5MB
-
MD5
a2ac80da3aa940b04876356020ccaa99
-
SHA1
4d1f5b6885570faeee71ae1865748b84deee26d7
-
SHA256
9a5c41bbbd43bca03c028622e12c5070ba9d1ac0756ae2cf93d2974a483bb0cb
-
SHA512
eecac18345927eb3c917ecfeeb0ce85623157f3103a7cd39687a02d5ba0088cd32a746846e0dcf9ab5609503e8db6448fdb369ce3fc75f10ae87bbd7c26be5e3
-
SSDEEP
393216:hpLAOwIyM4Wfkqem5bbAbZByI60ED6Ad0+U8dxk10OnrDVarQ9FB:bAOhyMTfzPbkiIDu6wpU8dxktrRnN
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
7zFM.exepid Process 396 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes:
7zFM.exedescription pid Process Token: SeRestorePrivilege 396 7zFM.exe Token: 35 396 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
7zFM.exepid Process 396 7zFM.exe