Analysis
-
max time kernel
93s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
11-12-2024 21:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MalachiTemp (2).zip
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
MalachiTemp (2).zip
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
MalachiTemp (2).zip
-
Size
11.7MB
-
MD5
6547f016ad4a2a2ac21830cdc787bf3f
-
SHA1
7ea0143a1b4bfd234b5df31017d03cf82e914337
-
SHA256
53288348c08f054b6d7d9a10a74b45c202ccd86ebd6636a889e8600f85b199f6
-
SHA512
c8037af6e178a9067031fb6c6da5e86a9ec12b71f6f3e536566700719ee5a44d3df5fcbc30d6c2cbc6ef292467962f8c9b2048092d7ae0861888e7228499f801
-
SSDEEP
196608:E/IbMxdZb3hTqr1dUn//P8djLpaawweZps8im3izDKt1VlenB34M/3vNW3RxtMFM:EaiZbxTqrnUn//OjFJM6Kt1VQ2M/v8M2
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1572 7zFM.exe Token: 35 1572 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1572 7zFM.exe