Analysis
-
max time kernel
97s -
max time network
210s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241023-en -
resource tags
arch:x64arch:x86image:win10ltsc2021-20241023-enlocale:en-usos:windows10-ltsc 2021-x64system -
submitted
20-11-2024 23:20
Static task
static1
Behavioral task
behavioral1
Sample
file.7z
Resource
win10ltsc2021-20241023-en
windows10-ltsc 2021-x64
14 signatures
300 seconds
Behavioral task
behavioral2
Sample
file.7z
Resource
win10ltsc2021-20241023-en
windows10-ltsc 2021-x64
2 signatures
300 seconds
General
-
Target
file.7z
-
Size
17.2MB
-
MD5
bd3ba3a1a28d9bf7fa00996b7eeec676
-
SHA1
c0bd1de5d05e5e202589561b52b791dc20f3cc25
-
SHA256
a66b1a5b77b04356aa45d268862fb7781241074f7113893c8dc32510a09097d6
-
SHA512
1220167c39db251b14f1136c880034e061dabdeedb082798fa899600dd6849d7747a348a1aec4f760c25a7947adf707059e6871bfb815f8321b8286e79fede86
-
SSDEEP
393216:FhXjpzRuD6Qf/gH6iyxk7vdTadU0xAujSbBVmgLtfZybNoL0swCqaH2xexXakOKF:F5NlGwaavdmdUsAujsBncbNd5UqhC
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes:
7zFM.exedescription pid Process Token: SeRestorePrivilege 3204 7zFM.exe Token: 35 3204 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
7zFM.exepid Process 3204 7zFM.exe