Analysis
- max time kernel
23s - max time network
29s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
31/10/2024, 12:29
Static task
static1
Behavioral task
behavioral1
Sample
Запит СБУ.rar
Resource
win7-20241010-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
Запит СБУ.rar
Resource
win10v2004-20241007-en
2 signatures
150 seconds
General
- Target Запит СБУ.rar
- Size 986KB
- Sample241031-pn52fayclf
- SHA256 35d6eab4f66ce38c0a8953b5fcb3b03bf9f042ca4a4ef8f0555ebabe39ac18f8
- MD5 f46e12150b7b0e381c3cf871325eed8e
- SHA1 57d88bcbf4f6804cdaea6b9c06e0a2a204ec4a6a
- SHA512 b76dc0f752443f751fdc55d5743f63baa97404bde12ec655ca52477a3f8b5f582a98fa362840fb1d624f955663bebb8735c573705c079d1aafb8c73b8f2bd4b1
- SSDEEP 24576:P5g167y+rl6d68YVdLpeRGOKIlwu2Q3crnO+Pt:t7y+lgCL2wuN3crntPt
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 924 7zFM.exe Token: 35 924 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 924 7zFM.exe