4005a08a4853f72ebd58f49ea28e39b0ecf239eb9ada1aaa2c3adcfec8a48238 | Triage

Analysis

max time kernel
1565s
max time network
1567s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
04-12-2024 18:17

Sharing

Report Analysis Logs

General

Target

Sryxen-main.zip
Size

1.1MB
MD5

235c8379ad047cc7f1dae05470e235a8
SHA1

c9a328a779395449bb6a58c01322892b63d506c3
SHA256

4005a08a4853f72ebd58f49ea28e39b0ecf239eb9ada1aaa2c3adcfec8a48238
SHA512

23e5dd80f76812502f91d57ab1f303da41d43367d5e05777e43e6692fd3ffde3668f740347baceb4976a440ab659c518d5bc9694e5efd77ba1fee4b666d97849
SSDEEP

24576:IjvbwBoSoz39x2UTLmpLtWv6SKZQrE/j1aMoLs:I/wBEzNo+LmttWvtQBYs

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2568	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	2568	7zFM.exe
Token: 35	2568	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2568	7zFM.exe

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Sryxen-main.zip"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:2568

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads