Analysis
-
max time kernel
361s -
max time network
362s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
30-11-2024 22:18
Behavioral task
behavioral1
Sample
Fakz.zip
Resource
win7-20240903-en
windows7-x64
2 signatures
600 seconds
General
-
Target
Fakz.zip
-
Size
22KB
-
MD5
1ec66394ed0030c48d10196ccc498c6e
-
SHA1
1c89fd722bd1be31672a1aba4bfcb09354729917
-
SHA256
54cff1f1f65f87805c94865727bdd49425ac64a1f9d9d3b758e933e5928354d8
-
SHA512
4615e8ccbe6aba4d6f2ed436c7e061bb962100c7367992ac1105c9ca6de609c80e844969459b035a499f764bf322a3629bcc8d2f2963166a794c217c2f8e2ba9
-
SSDEEP
384:NE6hhodYWhY1XXH92vjHj8HpUsoanhetSNSabWfjdfpaiWO0+JH8xTcCqT63t:NlqY1n0rHjMproanhWmKfZfpapp+JH8p
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes:
7zFM.exedescription pid Process Token: SeRestorePrivilege 2440 7zFM.exe Token: 35 2440 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
7zFM.exepid Process 2440 7zFM.exe