Analysis
- max time kernel
118s - max time network
123s - platform
windows7_x64 - resource
win7-20240903-en - resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system - submitted
11/11/2024, 03:05
Static task
static1
15 signatures
Behavioral task
behavioral1
Sample
241105-dtxrgatbpg_pw_infected.zip
Resource
win7-20240903-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
241105-dtxrgatbpg_pw_infected.zip
Resource
win10v2004-20241007-en
17 signatures
150 seconds
Behavioral task
behavioral3
Sample
201106-9sxjh7tvxj_pw_infected.zip
Resource
win7-20240903-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
201106-9sxjh7tvxj_pw_infected.zip
Resource
win10v2004-20241007-en
43 signatures
150 seconds
General
- Target 201106-9sxjh7tvxj_pw_infected.zip
- Size 162KB
- Sample241111-dlmlja1jbx
- SHA256 b99f3781093d168fe884a5e9578589628d9df871f08aedc6cacddfb223339cb2
- MD5 be3fb61218c3f159acc5d2715662eef7
- SHA1 c34ed3d26f606e0b59c5c6712a17638185f7db07
- SHA512 94198ae99c40d9272ef30865f58fff78c919fd593625666c1c118e38cea73e91777148ea3167761565f9ab31693e3dc87893b5616ac39e7a84b38e616bee22a4
- SSDEEP 3072:5gOrQAaFT9LjOAfocXVEvn7EAS2jePWkwlfBGk9JTwcJIVPlPGSdKNtZcRPAkSxo:RQ5FVOncF2SDPWkwfGk9JTwc2VRGkmtm
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1604 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1604 7zFM.exe Token: 35 1604 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1604 7zFM.exe