Analysis
-
max time kernel
1560s -
max time network
1563s -
platform
windows7_x64 -
resource
win7-20241023-en -
resource tags
arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system -
submitted
09-12-2024 19:19
Behavioral task
behavioral1
Sample
prank.zip
Resource
win7-20241023-en
windows7-x64
3 signatures
1800 seconds
Behavioral task
behavioral2
Sample
prank.zip
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
1800 seconds
General
-
Target
prank.zip
-
Size
37.3MB
-
MD5
3cfdf9542fe562cafa039b017b6c132c
-
SHA1
401d3d1cf805acfeb8f54d93afb9003663eb463b
-
SHA256
eee5148cf8a219e81c9330cc253677333c1b5de273593cbc86986ea0476f414f
-
SHA512
d136a9ae181408413c15a1975abee60a34ea096f718ead6d2a7f1c8ddd0a2e057d0a80cc7e0282d11643439cb755bd184f62ec50241362dfe8c15ae520d07b6a
-
SSDEEP
393216:LCyt8yLre34k1CPwDvt3uFRCH3dEVB399e0DG6fTKcY1ErSkTGEzADiyrcFuLtwa:LqH6fecYZKG/iyJe+4vfZ6
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1420 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1420 7zFM.exe Token: 35 1420 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1420 7zFM.exe