Overview
overview
10Static
static
1Microsoft-...in.zip
windows7-x64
10Microsoft-...in.zip
windows10-2004-x64
1Microsoft-...io.dll
windows7-x64
1Microsoft-...io.dll
windows10-2004-x64
1Microsoft-...up.exe
windows7-x64
5Microsoft-...up.exe
windows10-2004-x64
10Microsoft-...DME.md
windows7-x64
3Microsoft-...DME.md
windows10-2004-x64
3Microsoft-...pt.vdf
windows7-x64
3Microsoft-...pt.vdf
windows10-2004-x64
3Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
22-11-2024 11:45
Static task
static1
Behavioral task
behavioral1
Sample
Microsoft-Flight-Simulator-2024-Crack-main.zip
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
Microsoft-Flight-Simulator-2024-Crack-main.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Microsoft-Flight-Simulator-2024-Crack-main/Asobo Studio.dll
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
Microsoft-Flight-Simulator-2024-Crack-main/Asobo Studio.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Microsoft-Flight-Simulator-2024-Crack-main/Microsoft Flight Simulator 2024 Setup.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Microsoft-Flight-Simulator-2024-Crack-main/Microsoft Flight Simulator 2024 Setup.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Microsoft-Flight-Simulator-2024-Crack-main/README.md
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
Microsoft-Flight-Simulator-2024-Crack-main/README.md
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Microsoft-Flight-Simulator-2024-Crack-main/installscript.vdf
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Microsoft-Flight-Simulator-2024-Crack-main/installscript.vdf
Resource
win10v2004-20241007-en
General
-
Target
Microsoft-Flight-Simulator-2024-Crack-main.zip
-
Size
9.0MB
-
MD5
744a2b0e676d60066f52e1633724ac6e
-
SHA1
a79fef883557e49ed5a923d920d4178fcdbc2a0a
-
SHA256
fb5fdba6e89240c8b99c11923471a72975e0026e5df97dcdd3c41caf759527cf
-
SHA512
691f4a1ccb47951b0b9973edfce56200e7ee3337e2f7d19bf86beeba03d25ddb3d2e9c563d9322a2ab27becacafa27c7d2ab40f7c5eb5a0c2e0079f6d0d00b39
-
SSDEEP
196608:wAN6NV02cQGZSZyWCidFEs6CHdeuYqBOEom0vBYOzssK0kgApMe+02CnsjUQNrIl:wm67lL+KG4iFEwWOJmGB9aar9geUorng
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4004 7zFM.exe Token: 35 4004 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4004 7zFM.exe