Analysis
-
max time kernel
0s -
max time network
0s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
26-12-2024 01:24
Static task
static1
Behavioral task
behavioral1
Sample
Unconfirmed 739996.rar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Unconfirmed 739996.rar
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Hoic/buttons2/buttons.rar
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Hoic/buttons2/buttons.rar
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Hoic/hoic2.1.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Hoic/hoic2.1.exe
Resource
win10v2004-20241007-en
General
-
Target
Hoic/buttons2/buttons.rar
-
Size
59KB
-
MD5
7d7495cdeb9b52f12d32460027782d0d
-
SHA1
08c5ff013f5d0469a941bc3e3bc5446270d3f3ba
-
SHA256
99344a350f7f78dee7b1e31d018a53ffc8b574271a78b35c0f8abfa2f804bd9a
-
SHA512
b36a9f3b6cfd0c2c09901cefdca82d56bcc7727da4fa98c81877b341c187a4f54d7a3a282201f39cf3a6f2eccd5fd78921c476f9268c31612579d876a30c3f4b
-
SSDEEP
768:p357+O35A351rJJ+35BA35J35Q+H35Zg35zbKD35hG35UD35k35hZPl635mjL35l:qNJ8SOQEPl5
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2640 7zFM.exe Token: 35 2640 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2640 7zFM.exe