Analysis
-
max time kernel
449s -
max time network
452s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system -
submitted
01-12-2024 12:51
Static task
static1
Behavioral task
behavioral1
Sample
Microsoft_keygen_by_KeyGenGuru.zip
Resource
win11-20241007-en
Behavioral task
behavioral2
Sample
Microsoft_keygen_by_KeyGenGuru.zip
Resource
win11-20241007-en
Behavioral task
behavioral3
Sample
FILE_ID.diz
Resource
win11-20241007-en
Behavioral task
behavioral4
Sample
Microsoft_keygen_by_KeyGenGuru.exe
Resource
win11-20241007-en
Behavioral task
behavioral5
Sample
Password.HERE.jpg
Resource
win11-20241007-en
General
-
Target
Microsoft_keygen_by_KeyGenGuru.zip
-
Size
5.1MB
-
MD5
7294a7f26653ff7475a5ba1e6c495c10
-
SHA1
8270f5e9cb997652ab256868519a7e1095038b87
-
SHA256
bde059b6dffbfb26f315f559572ff5b90c93f9baae7c923c452d5b18829a99b4
-
SHA512
045cc1521b65950ce31433992796d5d2054f8807d9bede452bb456244a80d46d6eb959e7a774fa194d8f5be7075e7bab6914c1b73e29782d416202621976edf2
-
SSDEEP
98304:e+EbPCDOdcEOMj7QXHHWRcgi6xzlRdmOgTEmHfmvcamCpbby6p1FyBa/:eNgecEOMjAipiGbdmOWtkjX/LyY
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes:
7zFM.exedescription pid Process Token: SeRestorePrivilege 4080 7zFM.exe Token: 35 4080 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
7zFM.exepid Process 4080 7zFM.exe