914bc6e1605d7004e8f020cd8877020f70d5b967f5eb80bc3780d211a63fc99c | Triage

Analysis

max time kernel
30s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
25-11-2024 11:56

Sharing

Report Analysis Logs

General

Target

Hotmail Checker New.rar
Size

963KB
MD5

9e046854ea261c45adc18780e837641f
SHA1

ef0b0d971b8470a347f5dd293a25899ac11610f8
SHA256

914bc6e1605d7004e8f020cd8877020f70d5b967f5eb80bc3780d211a63fc99c
SHA512

767566181805994faf01300d3f232bea3401c3aa65b899dd940ed44de5813957086688686288d9e996c5ec3ed73f899056c93c3c72063655cf8fefbd942a2fa4
SSDEEP

24576:qlOkp0AJJYlvoT8szO4EFRTPgYsFuWSNWOL44Owp3wQd:qlZGAJJYlvoIsz9OILOWk44XpgQd

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4232	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	4232	7zFM.exe
Token: 35	4232	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4232	7zFM.exe

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Hotmail Checker New.rar"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:4232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads