Analysis

  • max time kernel
    99s
  • max time network
    146s
  • platform
    windows10-ltsc 2021_x64
  • resource
    win10ltsc2021-20241211-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20241211-enlocale:en-usos:windows10-ltsc 2021-x64system
  • submitted
    21-12-2024 14:04

General

  • Target

    Cisco_VPN_Client_v5_0_07_keygen_by_KeyGenGuru.zip

  • Size

    7.2MB

  • MD5

    d8921169fee349f9e70a294901d59ffb

  • SHA1

    cf45c1d9b230ed7464596c24b8db099fe6cc9359

  • SHA256

    af66ad74e9a3367191ad63919581995407706f28c45d8379f50da494ff724fd5

  • SHA512

    b0c16d4b7b22361b70d94135a65d0284367791f3919237d2abd90688393f4378133baa4e88cafec3ebf9c467596019088b26931a971475e6c27ebee4742c63ec

  • SSDEEP

    196608:FIeZHNhnaNOgD0rNWfu1LwGxLlrkoaAsHpS:FIeZHNhu0rggdxLZNug

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Cisco_VPN_Client_v5_0_07_keygen_by_KeyGenGuru.zip"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:3052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads