Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
21-12-2024 14:41
Static task
static1
Behavioral task
behavioral1
Sample
Indian_Email_MARKETING_hacked.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Indian_Email_MARKETING_hacked.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Team insane Pakistan.txt
Resource
win7-20241023-en
Behavioral task
behavioral4
Sample
Team insane Pakistan.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
email_marketing.sql
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
email_marketing.sql
Resource
win10v2004-20241007-en
General
-
Target
Indian_Email_MARKETING_hacked.zip
-
Size
2.6MB
-
MD5
6027792d3dc9f4499b6c74f77040f467
-
SHA1
f7fd5edf4d0b7f948b39b6af95c057db1bc40b92
-
SHA256
8d3add2b287a45b01a9674c8c8c15c1dd62ccb2edf1b735ffe0ce298b6d025ec
-
SHA512
70ad929392528bc68483d9a1414791b5bf5ba125d8564e0dc086bc400e4f62203fd3491d18aab620934b37ac944b1d813ef6df226bee65e137397f6c32695f9d
-
SSDEEP
49152:KuvxJ5scJGdOMRGQr7ahXnfBrpGmh7i2e9t7Sgn1NcaAJmaLCdm9zLU7YnFIkKmi:/tscJGdrYu7oXbLop9tmg1NtyE6LbnU/
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1984 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1984 7zFM.exe Token: 35 1984 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1984 7zFM.exe