Analysis
-
max time kernel
15s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
09-12-2024 15:43
Static task
static1
Behavioral task
behavioral1
Sample
Tool.zip
Resource
win7-20240729-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Tool.zip
Resource
win10v2004-20241007-en
windows10-2004-x64
12 signatures
150 seconds
General
-
Target
Tool.zip
-
Size
52.0MB
-
MD5
7cedd43892780c0a717738c28b0033d9
-
SHA1
8a9f801abb6d16bc60406c13ffc11f98ba54e367
-
SHA256
f6570c9d8216762973f6858e03fa7c19292fbe6429ed76220e0639344fb58e7b
-
SHA512
b4fe46794572ec33db150f4a4e3c5a21edacaeaee17c6a053ff5384221dcfcde87c9a8bd8c0412bdbea1f4ff2614cfb05cf9e67859d60fc3fe51d14111d66dd1
-
SSDEEP
786432:ZT69PiQJVg2Sqpq+dU+x8GRFo8d2Ye4iPj3j8Sw7G2gE+jWONh1CriDc0pRP0Zlh:ZTsEqcMTBd1uc7pgEyNKF+h0ZCmt
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2084 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2084 7zFM.exe Token: 35 2084 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2084 7zFM.exe