Analysis
-
max time kernel
17s -
max time network
20s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
03-12-2024 04:20
Behavioral task
behavioral1
Sample
All In One Pack.rar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
All In One Pack.rar
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
All In One Tweak.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
All In One Tweak.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Gg7���.pyc
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Gg7���.pyc
Resource
win10v2004-20241007-en
General
-
Target
All In One Pack.rar
-
Size
6.6MB
-
MD5
7a32a19e6bd45a0e77b3d3ae506e3c83
-
SHA1
6980b72e6cd8655a6d583f0e6ed317f2c9ade8f1
-
SHA256
7d4679915ac9c62845ee8922dcff924475930ed219ece8d49b4eed5be446b085
-
SHA512
8b940ed21fffe3ea11c7f3e8191a2b0ff6016fb0880ba133766e171b67070cd0a77d46e671345acc7711b6eca78409f28af5c5345c55672d607c8c3e40e2151a
-
SSDEEP
98304:55rFg7m3I6cAB479xSr/V2pDWkzuB03XQ8WAL8y9nFnx9FleQNUt+O1q13Bvdsy:5dFbYbRSh2okzuBoXQ8WQ7nleea72ldV
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2280 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2280 7zFM.exe Token: 35 2280 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2280 7zFM.exe