Analysis
-
max time kernel
1440s -
max time network
1442s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
20/11/2024, 13:10
Behavioral task
behavioral1
Sample
Astra-image-logger-main.zip
Resource
win7-20240729-en
3 signatures
1800 seconds
Behavioral task
behavioral2
Sample
Astra-image-logger-main.zip
Resource
win10v2004-20241007-en
2 signatures
1800 seconds
General
-
Target
Astra-image-logger-main.zip
-
Size
15.9MB
-
MD5
a49707923e0cc07c89979a60b28ed56c
-
SHA1
111fbb9d40422af300a26e35536e3328f4f39d7c
-
SHA256
9a6113a66e0af2be3955ec88f8a752d9d80be82d6122de7f263049feedadc814
-
SHA512
a9326de9d1d253574b95ed8253bc5c470287ae558f8b0e2dd4ec03b6d480e2bb3c5c2cc644e061a5eee28bf3b08812e602d14c8673fb3f4c2c7673d9dd99d028
-
SSDEEP
393216:d6pTOKxYbATd5+Ts9KT5lut30cKwVxBSFP9FiqoJAr1:d+TP2bATv+TCWItEsBcPPpoJAZ
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2744 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2744 7zFM.exe Token: 35 2744 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2744 7zFM.exe