bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa

Analysis

max time kernel
122s
max time network
128s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
11/11/2024, 01:37

Target
book 2.zip
Size 28KB
Sample241111-b136qazeld
SHA256 f791bea6d653eddcaf8be57e45b698e75f105e28a20c50f519ad43a2b2e27b2a
MD5 38605a41eda691b378c8304bf914c777
SHA1 75f2667ccacce7c7947c186dca5029ffee720c01
SHA512 d1876ebad38543260b3c4a2b83b69546da52b093f459890835ad02ea65ea712e91f40c5bf9ae0313fa2f4fec303cea2348c5272a4ac70088d1dbffb7d5163374
SSDEEP 768:os5/i8xs5/i8As5/i83s5/i8qs5/i89s5/i8Ms5/i8zs5/i8Cs5/i8ps5/i8hs5S:ouDu2uNucuHu6uBuUu7uTuGuduguXuKz
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2956	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	2956	7zFM.exe
Token: 35	2956	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2956	7zFM.exe