Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
22-11-2024 16:08
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
WizWorm v4 Updated -Cracked.zip
Resource
win7-20241010-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
WizWorm v4 Updated -Cracked.zip
Resource
win10v2004-20241007-en
windows10-2004-x64
11 signatures
150 seconds
General
-
Target
WizWorm v4 Updated -Cracked.zip
-
Size
38.4MB
-
MD5
f21dee21d078b19e5b25239aad3576ae
-
SHA1
996ce235c35df69c17c617e6ad313fb808f9d47d
-
SHA256
f7478694042c486cf12523f93755a432188baf0e0625d0442b03307f05908456
-
SHA512
dd998c4526d0b97cb10a53161ce90f9a0c65f15e5971162d4b2717c88b9f8768c70b6373460dd2b44a7a5250951888562c54021d4350dfe38c97990b0a0460ee
-
SSDEEP
786432:1gbHG3bN5OEOLtOLTXVrHCYhKJB3qSD/lUntnPed+Gwfdp12zH+cyNS:1gbHG37ZOLtOLLVrQJdDGwd+XL1KcS
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1668 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1668 7zFM.exe Token: 35 1668 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1668 7zFM.exe