Analysis
-
max time kernel
426s -
max time network
444s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
03-11-2024 16:39
Behavioral task
behavioral1
Sample
WindowBlinds v11.02-Jasi2169.rar
Resource
win7-20240903-en
15 signatures
600 seconds
Behavioral task
behavioral2
Sample
WindowBlinds v11.02-Jasi2169.rar
Resource
win10v2004-20241007-en
2 signatures
600 seconds
General
-
Target
WindowBlinds v11.02-Jasi2169.rar
-
Size
68.9MB
-
MD5
7f6af9742d7104f4e2047fc0ca9c9ac3
-
SHA1
781bc904347e7ccfa2b8e7196cc4fe7044ab9302
-
SHA256
0cd33fd45b2a73c3ddd84afe74aaf91cdeaf62d28de523c25884df5d5add7cc7
-
SHA512
549449c1737b9db5b8041e88ccc2a1383c25e7cc2840f3d2cf1024858fbe1c6d53ddd2e62629a0463da8b2fd44e953b7bec2bdec76474273bc2eb8fbaa1671f0
-
SSDEEP
1572864:2y13thMC3X5H8Erm1rFtdaVlYF2Z94XAPtO7JqMDgWad:R3x3X58EraHdUlYwLgHfDmd
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2604 7zFM.exe Token: 35 2604 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2604 7zFM.exe