Analysis
-
max time kernel
99s -
max time network
101s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241023-en -
resource tags
arch:x64arch:x86image:win10ltsc2021-20241023-enlocale:en-usos:windows10-ltsc 2021-x64system -
submitted
27/11/2024, 18:41
Static task
static1
Behavioral task
behavioral1
Sample
@#%$#$%%$rD__916464--0peɴ_Set-U!@#ᴘ$%$#$.zip
Resource
win10ltsc2021-20241023-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
@#%$#$%%$rD__916464--0peɴ_Set-U!@#ᴘ.zip
Resource
win10ltsc2021-20241023-en
3 signatures
150 seconds
General
-
Target
@#%$#$%%$rD__916464--0peɴ_Set-U!@#ᴘ.zip
-
Size
26.4MB
-
MD5
8268622b0f4df68c67db1bcd05509a0d
-
SHA1
40a1e362b03e36c2f9e96ff14b1c7ee6cf25fdba
-
SHA256
198dbb3e51c3031d94edd0c3fe2b522c4375b021ec070685fee28f9adee50b69
-
SHA512
607bf53e0266c106a6a5e82f1fb05c386b2f5823e8d6d8645d7ccd167ee19f6a89687b51271b4cc13b2a9d1c7bc9d17aa91bde95492a51649e14ced927b91d46
-
SSDEEP
393216:gUEQRAT9XQ0lPsE+OueaUJt5r2ab3zm/YOdmtb/8T4VoFqYf6BqBFMWDYdHPLTXJ:gxJjPFUQ5rpbDmAOdmtb/8RpGLbE+wU
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 704 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 704 7zFM.exe Token: 35 704 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 704 7zFM.exe