Analysis
-
max time kernel
100s -
max time network
145s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241211-en -
resource tags
arch:x64arch:x86image:win10ltsc2021-20241211-enlocale:en-usos:windows10-ltsc 2021-x64system -
submitted
21-12-2024 14:15
Static task
static1
Behavioral task
behavioral1
Sample
adobe_illustrator_keygen_by_KeyGenGuru.zip
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral2
Sample
FILE_ID.diz
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral3
Sample
Password.HERE.jpg
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral4
Sample
adobe_illustrator_keygen_by_KeyGenGuru.exe
Resource
win10ltsc2021-20241211-en
General
-
Target
adobe_illustrator_keygen_by_KeyGenGuru.zip
-
Size
7.2MB
-
MD5
6a13e31002cd47d1c759b218dd39794a
-
SHA1
2a48a5534182edd0cf156025a41ff1d915f4c206
-
SHA256
7b6580c34efc8b9daea399247634c641ee9b3c32599a13ebfbd9b68f187ce138
-
SHA512
e8d900a89e49625dafebfd46655b1f7dd0b1ac932ff6c18ea8d59ee70423a0d669f4332addabed9e359c00bb3aef39c8101cbda62178069fe24e016604fa4458
-
SSDEEP
98304:2nbkSiEk/wQuriFQzHQjo1uNHVBnwMH5I5pFrRBNTAVffyXxhdLXX+xEv/6wLmm8:fpFwiFAHqN7ZG5LrvNzxhpAE6+Bc4i
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3428 7zFM.exe Token: 35 3428 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3428 7zFM.exe