Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    19-12-2024 22:23

General

  • Target

    Builds/LBG_vx-_____________FC8E43EC21BE9047_19.12.24_hacking_is_illegal_ok.zip

  • Size

    104KB

  • MD5

    be56768da1843725c5e270aea1faabc0

  • SHA1

    63573f687f70711a4a7f91c308e7edea95d8d767

  • SHA256

    b988dfd6339f208ff78a417e52e46c33f6c829529c84acb32f9a992816c12a41

  • SHA512

    a4b5d01245e1b17545ba4540f5239cf3ee412115116721e30f190234c8e38cca734dca89c17272e2ff1548a2f357e3be52c2e8713432a5e2a448539e04fd16bb

  • SSDEEP

    3072:kV08Ti7c5bOIT1heswd4hJKFwkWq1XODuH1SmOA:kV5Ti73ITdY4hJKqkdODoAA

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Builds\LBG_vx-_____________FC8E43EC21BE9047_19.12.24_hacking_is_illegal_ok.zip"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:236

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads