Resubmissions
12-12-2024 18:20
241212-wy4dxsvkcp 1012-12-2024 18:03
241212-wnfvwatqgp 1028-11-2024 00:38
241128-ay5fbstmfp 10Analysis
-
max time kernel
150s -
max time network
277s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
12-12-2024 18:20
Static task
static1
Behavioral task
behavioral1
Sample
Downloaders.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral2
Sample
4363463463464363463463463.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
4363463463464363463463463.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral4
Sample
New Text Document mod.exse.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
New Text Document mod.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral6
Sample
New Text Document mod.exe
Resource
win10v2004-20241007-en
General
-
Target
4363463463464363463463463.zip
-
Size
4KB
-
MD5
202786d1d9b71c375e6f940e6dd4828a
-
SHA1
7cad95faa33e92aceee3bcc809cd687bda650d74
-
SHA256
45930e1ff487557dd242214c1e7d07294dbedfa7bc2cf712fae46d8d6b61de76
-
SHA512
de81012a38c1933a82cb39f1ac5261e7af8df80c8478ed540111fe84a6f150f0595889b0e087889894187559f61e1142d7e4971d05bceb737ed06f13726e7eae
-
SSDEEP
96:XBf1inGx9SfZ+VCv3wlTDMQ1kyKXyyJNOBIKkNvL5qK+7zHf6MlYOQVPGmcEw:XBfwncSf8Cv3w9DZjKXjmBIKEvLs97D3
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4120 7zFM.exe Token: 35 4120 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4120 7zFM.exe