Analysis
- max time kernel
121s - max time network
126s - platform
windows7_x64 - resource
win7-20240903-en - resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system - submitted
11/11/2024, 03:05
Static task
static1
15 signatures
Behavioral task
behavioral1
Sample
241105-dtxrgatbpg_pw_infected.zip
Resource
win7-20240903-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
241105-dtxrgatbpg_pw_infected.zip
Resource
win10v2004-20241007-en
17 signatures
150 seconds
Behavioral task
behavioral3
Sample
201106-9sxjh7tvxj_pw_infected.zip
Resource
win7-20240903-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
201106-9sxjh7tvxj_pw_infected.zip
Resource
win10v2004-20241007-en
43 signatures
150 seconds
General
- Target 241105-dtxrgatbpg_pw_infected.zip
- Size 132.7MB
- Sample241111-dlmlja1jbx
- SHA256 38bc13ef112b2f17d4d1a80243fac6a521b5d58228984aae0752d79487fa3b66
- MD5 136b5aad00be845ec166ae8f6343b335
- SHA1 e51860dfb734c9715b6c9b74d9c582abe03ca90c
- SHA512 ed56b1afa85e304d6973d69e289631f15955d1619c6943a376d7d319018057d1a6fa0aa340ea6d43037ee17014f13e74e5ebddaf3aec62bf8e2da6b20b14ce42
- SSDEEP 3145728:m2t5SZQXkJuAwd3u5d5VO4Z9WSXL5qgP47khuJWCvcICllCCrE/z:m6ClwdeyqWSXVqeU5J7CvCCrgz
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1768 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1768 7zFM.exe Token: 35 1768 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1768 7zFM.exe