Analysis
-
max time kernel
1442s -
max time network
1443s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
13-11-2024 20:10
Behavioral task
behavioral1
Sample
Prynt Stealer.zip
Resource
win7-20240729-en
windows7-x64
3 signatures
1800 seconds
Behavioral task
behavioral2
Sample
Prynt Stealer.zip
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
1800 seconds
General
-
Target
Prynt Stealer.zip
-
Size
10.1MB
-
MD5
1b2c88d184fa22150d73e2ce32e982f2
-
SHA1
c7698afea515355f715cec3b38b71270393e2be7
-
SHA256
483258c8951eb8d9d61c28d122177e83e118dcd465ed133bded61ad82d6fd5db
-
SHA512
cde04aa5a512c1c02c249ef072dade5d1f6507bbc306cdf7b2f90c185243f0379c71bae0376a6256bfacb34df1fd61f5c5e820e8548b3da8ecbe367b7121be65
-
SSDEEP
196608:4s9ZQz/udqMZb++Bk5y0PMolOecQ8XqGL1mxcrEnRvzoFwoo82NEOWLn4vj:v88HVa5y0PMXky8UQ6w22NEOanmj
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1820 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1820 7zFM.exe Token: 35 1820 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1820 7zFM.exe