6ce374b8152c18a608e6812513f20dfd9eec26564caa58ff1cca766b3f4aacd4 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
13-11-2024 19:54

Sharing

Report Analysis Logs

General

Target

Prynt Stealer 7.2.2.rar
Size

7.8MB
MD5

a518813c6e2951820da8d982d74e079b
SHA1

2c33311ba0421a97f7901a2322892aef35580d26
SHA256

6ce374b8152c18a608e6812513f20dfd9eec26564caa58ff1cca766b3f4aacd4
SHA512

589da2aa8564227852f0ab00cd4eabb0a7dc50b27ea23e3dd68c30a6d6e7d6d6810bd2c57664a7ff6bf7bb56e94c6f3991ddb78f3967e50bf62a6a37abbbc6dc
SSDEEP

196608:W9swR3JQ65amk9zhuWK/ARbS4ookj+yNzXTff:WewRZQ65aDcWKF4uCyNzj3

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1732	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	1732	7zFM.exe
Token: 35	1732	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1732	7zFM.exe

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Prynt Stealer 7.2.2.rar"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:1732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads