c13a0cd7c2c2fd577703bff026b72ed81b51266afa047328c8ff1c4a4d965c97 | Triage

Resubmissions

12-12-2024 19:07

241212-xs6grswlhj 10

12-12-2024 19:07

241212-xsna7awlfl 10

11-12-2024 12:57

241211-p6934stkhw 10

08-12-2024 12:52

241208-p34f6ayngj 10

08-12-2024 12:51

241208-p3y7fatpe1 10

08-12-2024 12:48

241208-p133lstpbw 10

Analysis

max time kernel
95s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
08-12-2024 12:48

Sharing

Report Analysis Logs

General

Target

release.zip
Size

445KB
MD5

06a4fcd5eb3a39d7f50a0709de9900db
SHA1

50d089e915f69313a5187569cda4e6dec2d55ca7
SHA256

c13a0cd7c2c2fd577703bff026b72ed81b51266afa047328c8ff1c4a4d965c97
SHA512

75e5f637fd3282d088b1c0c1efd0de8a128f681e4ac66d6303d205471fe68b4fbf0356a21d803aff2cca6def455abad8619fedc8c7d51e574640eda0df561f9b
SSDEEP

12288:BfJ13+GoLo2d5ifXHE8134QwYOwFSFRiLQI:BKGo8EifSQwYWI

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	4548	7zFM.exe
Token: 35	4548	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4548	7zFM.exe

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\release.zip"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:4548

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads