Resubmissions

20/11/2024, 14:55

241120-sal8ysyfpj 7

20/11/2024, 14:54

241120-r9z4essqgp 7

Analysis

  • max time kernel
    147s
  • max time network
    150s
  • platform
    windows11-21h2_x64
  • resource
    win11-20241007-en
  • resource tags

    arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    20/11/2024, 14:55

General

  • Target

    NitroGenerator-Checker-main.rar

  • Size

    8.3MB

  • MD5

    cecae080f9a2005a9afa0f96bce6f2e7

  • SHA1

    93f5154b216c4a862e6a4e6ea81f64a7a06dc9ab

  • SHA256

    592abf8a884553d34b1a4b27ce12d51ad8dcaa2c35db7b004e37fcc642185405

  • SHA512

    0e5720b892ff1abfdae0c42fc970e94b5c307ea43931b9a6598cc7b12fe5e1f12a27c2c88c9b95567d77e017feeb30d84abd5c101bf2e14119109e666ed94866

  • SSDEEP

    196608:a9Rza1/MMedj8DhtneFHt9LOHgjN0CWKHzGB/7Vz7VZ5C+v:gi/MM+j8DhqHtNagjkWk7V35C+v

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\NitroGenerator-Checker-main.rar"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:4400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads