f442d0543f6df79be9fbaed90af2dedbcf2e4774561421763577b148a9ff8554 | Triage

Resubmissions

24/06/2025, 18:11

250624-wszhsaap6w 10

27/05/2025, 06:46

250527-hjl97sdk7w 10

20/04/2025, 20:55

250420-zqkhmaxjv2 10

11/03/2025, 16:12

250311-tnqnzaxn12 10

11/03/2025, 16:12

250311-tnj67axnz5 10

11/03/2025, 16:11

250311-tnb6ksxnz3 10

10/03/2025, 17:20

250310-vwhtrssxct 10

10/03/2025, 16:34

250310-t3aaja1xfv 10

31/01/2025, 15:30

250131-sxp85azjcz 10

Analysis

max time kernel
96s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
11/12/2024, 15:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

v2.bin(1).zip
Size

73KB
MD5

620fd461cab821f478f7cce1bf06d1ac
SHA1

a083516b5a275a2e9141f68a99ab4878632c5552
SHA256

f442d0543f6df79be9fbaed90af2dedbcf2e4774561421763577b148a9ff8554
SHA512

9ad7d4f17e156e21885c89b242430a06652ea8bdc45b22dc64f23efe8c2f6391ac5556c5e2bd14cf46d5bd8cb8dbb89f714466eef348dcb19ad16f3175dd3117
SSDEEP

1536:yJrdZ1PgFel3BJmc11f0MPxwX5o2CfFGm8SXZRObA:yJJZ1cKxJm+bZGCfFjpRObA

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2856	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	2856	7zFM.exe
Token: 35	2856	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2856	7zFM.exe

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\v2.bin(1).zip"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:2856

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads