Overview
overview
1Static
static
142.zip
windows7-x64
142.zip
windows10-2004-x64
1lib 0.zip
windows7-x64
1lib 0.zip
windows10-2004-x64
1book 0.zip
windows7-x64
1book 0.zip
windows10-2004-x64
1book 1.zip
windows7-x64
1book 1.zip
windows10-2004-x64
1book 2.zip
windows7-x64
1book 2.zip
windows10-2004-x64
1book 3.zip
windows7-x64
1book 3.zip
windows10-2004-x64
1book 4.zip
windows7-x64
1book 4.zip
windows10-2004-x64
1book 5.zip
windows7-x64
1book 5.zip
windows10-2004-x64
1book 6.zip
windows7-x64
1book 6.zip
windows10-2004-x64
1book 7.zip
windows7-x64
1book 7.zip
windows10-2004-x64
1book 8.zip
windows7-x64
1book 8.zip
windows10-2004-x64
1book 9.zip
windows7-x64
1book 9.zip
windows10-2004-x64
1book a.zip
windows7-x64
1book a.zip
windows10-2004-x64
1book b.zip
windows7-x64
1book b.zip
windows10-2004-x64
1book c.zip
windows7-x64
1book c.zip
windows10-2004-x64
1book d.zip
windows7-x64
1book d.zip
windows10-2004-x64
1Analysis
- max time kernel
148s - max time network
156s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
11/11/2024, 01:37
Static task
static1
Behavioral task
behavioral1
Sample
42.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
42.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
lib 0.zip
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
lib 0.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
book 0.zip
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
book 0.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
book 1.zip
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
book 1.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
book 2.zip
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
book 2.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
book 3.zip
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
book 3.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
book 4.zip
Resource
win7-20241010-en
Behavioral task
behavioral14
Sample
book 4.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
book 5.zip
Resource
win7-20241023-en
Behavioral task
behavioral16
Sample
book 5.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
book 6.zip
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
book 6.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
book 7.zip
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
book 7.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
book 8.zip
Resource
win7-20240729-en
Behavioral task
behavioral22
Sample
book 8.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
book 9.zip
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
book 9.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
book a.zip
Resource
win7-20241010-en
Behavioral task
behavioral26
Sample
book a.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
book b.zip
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
book b.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
book c.zip
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
book c.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
book d.zip
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
book d.zip
Resource
win10v2004-20241007-en
General
- Target book 8.zip
- Size 28KB
- Sample241111-b136qazeld
- SHA256 f791bea6d653eddcaf8be57e45b698e75f105e28a20c50f519ad43a2b2e27b2a
- MD5 38605a41eda691b378c8304bf914c777
- SHA1 75f2667ccacce7c7947c186dca5029ffee720c01
- SHA512 d1876ebad38543260b3c4a2b83b69546da52b093f459890835ad02ea65ea712e91f40c5bf9ae0313fa2f4fec303cea2348c5272a4ac70088d1dbffb7d5163374
- SSDEEP 768:os5/i8xs5/i8As5/i83s5/i8qs5/i89s5/i8Ms5/i8zs5/i8Cs5/i8ps5/i8hs5S:ouDu2uNucuHu6uBuUu7uTuGuduguXuKz
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 412 7zFM.exe Token: 35 412 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 412 7zFM.exe