Analysis
- max time kernel
95s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
10/11/2024, 04:39
Static task
static1
Behavioral task
behavioral1
Sample
10-11-2024_PwWn7tf4tvTlf2G._bxbsRZz.zip
Resource
win7-20240903-en
28 signatures
150 seconds
Behavioral task
behavioral2
Sample
10-11-2024_PwWn7tf4tvTlf2G._bxbsRZz.zip
Resource
win10v2004-20241007-en
2 signatures
150 seconds
General
- Target 10-11-2024_PwWn7tf4tvTlf2G._bxbsRZz.zip
- Size 4.7MB
- Sample241110-e927kayrfv
- SHA256 d3248730e06594bdb4e514e3147a0ccff7c119b926ced3d88d96dc2189850900
- MD5 e8fba5aaf0254be07a34023bc82c2d9e
- SHA1 8040580ea75790184d53b767fb18af998082bccb
- SHA512 f0fdb2317c0806d420dff29346044065ff7639d35ecdf232d573475bf2966c6cc3de1c227317f5dd740041bb320e5632f7a2ba28b1bc605d4c9e41a6c791a5a9
- SSDEEP 98304:1Jzrklg/97TkR3PjTSG68ycuGwZlt/Gyq+g9Xw:1JPky/y5TC8puGwZlkkEXw
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2320 7zFM.exe Token: 35 2320 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2320 7zFM.exe