ecc43f3fc4baf32cef7abe3787101e278480341f124413216404ebb89b7babe0 | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
05/11/2024, 03:14

Sharing

Report Analysis Logs

General

Target

Discord-Nuker-main.zip
Size

1KB
MD5

137afd31b54d3520018c094236eda7d5
SHA1

d235172bc9df13850fb45a49988c996bdfc68470
SHA256

ecc43f3fc4baf32cef7abe3787101e278480341f124413216404ebb89b7babe0
SHA512

ec0b7a84002911a7ff909616533cd30f5d50fb71e7265b653a8a1246ac5df954dd6988b356764a815903da2e91aa26096cf4101e044aee43eef88ccecb80af78

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1064	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	1064	7zFM.exe
Token: 35	1064	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1064	7zFM.exe

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Discord-Nuker-main.zip"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:1064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads