Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
14-12-2024 17:29
Static task
static1
Behavioral task
behavioral1
Sample
Unborn Loader.rar
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
Unborn Loader.rar
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Unborn Loader.exe
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
Unborn Loader.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
d3dx9_39.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
d3dx9_39.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
msvcp140.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
msvcp140.dll
Resource
win10v2004-20241007-en
General
-
Target
Unborn Loader.rar
-
Size
2.4MB
-
MD5
30e58249ce4ad8eedab5ba96cc249bde
-
SHA1
51b082f305f74b1ff70c7a19312cccd1fbe34859
-
SHA256
6f0508001795fa33102003e9fba80a30b91a68a2f2cc93897bf8810b3952cbf1
-
SHA512
ce3e87d1cf44a657e6e11212dfe0bc8597e23117ac4ef7dcdd782464fbcfd6464e9892fecbbb4715c4c2f945f30ca92212faf27ed7abee783829bf9138189216
-
SSDEEP
49152:V4SvGjF/Ma6VaXHjKf/rd3mterJl997XilaZLEmkwXCYJTU2pXsSWGl31iaV:VOF/MijWoI9ljzSlV+TUcnl
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2940 7zFM.exe Token: 35 2940 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2940 7zFM.exe