Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
06-12-2024 15:46
Static task
static1
Behavioral task
behavioral1
Sample
Conti Builder.rar
Resource
win7-20241010-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Conti Builder.rar
Resource
win10v2004-20241007-en
windows10-2004-x64
18 signatures
150 seconds
General
-
Target
Conti Builder.rar
-
Size
2.4MB
-
MD5
476b3969ddbb75be5174b64bdc2cdb07
-
SHA1
87ac2b436f1ea207b5f35aa84d4fc348df8c77e3
-
SHA256
44eaa6185d082fd3273b6b8c267935e2253bbe9acd345a7ef492d98112042743
-
SHA512
cf4eeeeaee09d2fcedc998fbcf96dc316eef5eef55f2e122af3f17caf6cf90ead465b08051ec7460a39761da5fb6a042b1bc4ef717c0c555aedcf10f06df0b7f
-
SSDEEP
49152:Jo+Oa8B53MBcRX9WOQ9csYYEyHsdzEB7qGzkMj8zgoKSGWzgbanPNkIAm:QB5UeAr9cIEyHsdAkGX3S0w1kRm
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2652 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2652 7zFM.exe Token: 35 2652 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2652 7zFM.exe