Analysis
-
max time kernel
120s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
15-12-2024 09:11
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Sorillus V6.2 updated.zip
Resource
win7-20240903-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Sorillus V6.2 updated.zip
Resource
win10v2004-20241007-en
18 signatures
150 seconds
General
-
Target
Sorillus V6.2 updated.zip
-
Size
224.0MB
-
MD5
93c78d45339f83c36c9da8e79d3f1665
-
SHA1
507de0bdffff3a316e0156fa14e514bf788da446
-
SHA256
862d9420d4773e4bf8f106e01398a351ff6837a2d02457b48120cd0bb631f162
-
SHA512
277fca01af54a970f043c1aeb7b10fd0c79aed776b14ac9a706b683372d9adf158cc45cdf1a5d3dfa8faaf5357dcf239e197db2564af460734414d39dbd2318f
-
SSDEEP
786432:KB7pso5UjVIrcv6c1BsaWWrXzdYCrYVcbGR53UMrwBSlomS5nr5v6sIcI47Tj+2M:KdAacvHBsaT3dp2x3UdiTx/Irg0cwfO/
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2364 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2364 7zFM.exe Token: 35 2364 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2364 7zFM.exe