Analysis
-
max time kernel
706s -
max time network
1149s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system -
submitted
14-12-2024 20:21
Static task
static1
Behavioral task
behavioral1
Sample
Bawless Windows Cracked By Vidhayakji786.rar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Bawless Windows Cracked By Vidhayakji786.rar
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Bawless Windows Cracked By Vidhayakji786.rar
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral4
Sample
Bawless Windows Cracked By Vidhayakji786.rar
Resource
win11-20241007-en
General
-
Target
Bawless Windows Cracked By Vidhayakji786.rar
-
Size
102.1MB
-
MD5
99a1d2a905676cf0542c2a4d45e58d46
-
SHA1
35fac87f8ca98865b6dee79023fb1c55cb925f0d
-
SHA256
1801c0278583e34f09b0a202c83afbc6f2bb97ab0acb2932057a25e5eba597a6
-
SHA512
3b1027101ef2d18a83aabd399c5ae3432b30f9ce541635ed35d1708864c55f94054b013e1c19e5b681838698067c8d6d722c3f9cf4c8b74c5c4ea8be40da8737
-
SSDEEP
3145728:lp5yB7PXOvhxn3VGFEWDE6YorqEU+vhI9C:lpIB7PevhVVGbw5oex9C
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3396 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3396 7zFM.exe Token: 35 3396 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3396 7zFM.exe