Analysis
- max time kernel
12s - max time network
16s - platform
windows7_x64 - resource
win7-20241010-en - resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system - submitted
22/11/2024, 06:20
Static task
static1
Behavioral task
behavioral1
Sample
MolataV57.rar
Resource
win7-20241010-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
MolataV57.rar
Resource
win10v2004-20241007-en
24 signatures
150 seconds
General
- Target MolataV57.rar
- Size 75.3MB
- Sample241122-g32css1qdr
- SHA256 078a28a3b3b9652db148cc65fd71f95717961dca09ea819c41ee0dd9514e40cd
- MD5 e1cdacaeeefa3141437e43049db9fa6e
- SHA1 1e4e8b17c7b704f88a1ec2bc9a8ccfa529be8127
- SHA512 415bb8304ccab94378f2fe295e98e122809ad4a68dfd9bd1c18752f7c1b504893d611e9045720023b57b5ab80074fd43075867cecabfe67bdfae3ea4d683e7e3
- SSDEEP 1572864:uBv4cmfewL/fBiw4gSpOCprDLshs8lnUK4Gkd:uBv4Zfs1p8Cp/LSs8l3kd
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 576 7zFM.exe - Suspicious use of AdjustPrivilegeToken 3 IoCs
description pid Process Token: SeRestorePrivilege 576 7zFM.exe Token: 35 576 7zFM.exe Token: SeSecurityPrivilege 576 7zFM.exe - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 576 7zFM.exe 576 7zFM.exe