Analysis
-
max time kernel
449s -
max time network
450s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system -
submitted
04/12/2024, 11:29
Static task
static1
Behavioral task
behavioral1
Sample
220913-j719psahcl_pw_infected.zip
Resource
win11-20241007-en
Behavioral task
behavioral2
Sample
7943496156.zip
Resource
win11-20241007-en
Behavioral task
behavioral3
Sample
7508939c077d0cf8ea1fadcba4255c69bc1b126d132e40bc28962e83435c8f13.exe
Resource
win11-20241007-en
Behavioral task
behavioral4
Sample
7d14b98cdc1b898bd0d9be80398fc59ab560e8c44e0a9dedac8ad4ece3d450b0.exe
Resource
win11-20241007-en
General
-
Target
7943496156.zip
-
Size
720KB
-
MD5
4ec1a76f3ce2412e06b484b3555d61b8
-
SHA1
86c121b50a0793525dacc66db93243481af58c58
-
SHA256
93fb21a9c51c0dbccb7e0bd5b4fad92061f540f3128ed2f9a248950c29f2f757
-
SHA512
96353d22f26165e2eadee302d435d6069c0fd1dd20d07fe217d481ee8402d19689ca13e596b02be12070304ae4600d9d6a7a93bdd5a7b69519e8245e276702d5
-
SSDEEP
12288:UEsXBmIQCdhuPidl4hE/rKX6i3FgnlcuUbemefeKMjMZzzlZKOVyU882X:UEsRmIBhus2QKXB6Bmaetj+zzeOl88e
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4900 7zFM.exe Token: 35 4900 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4900 7zFM.exe