Analysis
-
max time kernel
435s -
max time network
459s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system -
submitted
24-11-2024 01:47
Behavioral task
behavioral1
Sample
Testing (5).zip
Resource
win11-20241007-en
windows11-21h2-x64
2 signatures
600 seconds
General
-
Target
Testing (5).zip
-
Size
6.0MB
-
MD5
4361601ad4e2af850ccf0e600509c2ca
-
SHA1
9a2112227673788b6570384a2eb1f32537f46a30
-
SHA256
2c41808826974a0fdd3c7b27850143cad077a79e0cf69c011da495d6abee679a
-
SHA512
74e884d5cd117b6d5898f9c2b3ccd424b46a9bd958e2412987fdba00496318547a1b1f625de6b5195c8150ce81ef58e8c015875ccc00b222ffda1d5e0f830eab
-
SSDEEP
98304:VYhsAjqphjdMXv8Xg1qdPNGv4mLI833edIVEXYxssdOTyc4Fh+LhwgLUpjbk387K:qsAW7jakwUGv6E3edIqB2c4FIhwg6/yd
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3540 7zFM.exe Token: 35 3540 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3540 7zFM.exe