Resubmissions
29/10/2026, 08:21
261029-j8981aav8y1029/10/2026, 08:19
261029-j8as5sxze129/10/2026, 08:19
261029-j797lsxzez15/08/2026, 21:19
260815-z592tshg5712/05/2026, 09:30
260512-lghqsah14t12/05/2026, 09:29
260512-lf4a4ad17m11/05/2026, 13:07
260511-qcln4aaw4z09/05/2026, 21:41
260509-1j69gsdv7w1009/05/2026, 21:41
260509-1jyx4sdv7s19/04/2026, 22:54
260419-2vxd4aby7rAnalysis
- max time kernel
144s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
03/12/2024, 19:23
Static task
static1
15 signatures
Behavioral task
behavioral1
Sample
241105-dtxrgatbpg_pw_infected.zip
Resource
win7-20240729-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
241105-dtxrgatbpg_pw_infected.zip
Resource
win10v2004-20241007-en
2 signatures
150 seconds
General
- Target 241105-dtxrgatbpg_pw_infected.zip
- Size 132.7MB
- Sample241203-x381msvpgj
- SHA256 38bc13ef112b2f17d4d1a80243fac6a521b5d58228984aae0752d79487fa3b66
- MD5 136b5aad00be845ec166ae8f6343b335
- SHA1 e51860dfb734c9715b6c9b74d9c582abe03ca90c
- SHA512 ed56b1afa85e304d6973d69e289631f15955d1619c6943a376d7d319018057d1a6fa0aa340ea6d43037ee17014f13e74e5ebddaf3aec62bf8e2da6b20b14ce42
- SSDEEP 3145728:m2t5SZQXkJuAwd3u5d5VO4Z9WSXL5qgP47khuJWCvcICllCCrE/z:m6ClwdeyqWSXVqeU5J7CvCCrgz
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1336 7zFM.exe Token: 35 1336 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1336 7zFM.exe