6dfad86ed6d038112e72b8b6654af86ab35dbcdb6bfd7f3f152aa214a5d7090d | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
27-12-2024 20:37

Sharing

Report Analysis Logs

General

Target

skeet.zip
Size

12.9MB
MD5

64bb248825d05fcf0330fa8cab6aceed
SHA1

3322b84a0a7eeeca0b7ad34f43be57ad28836af1
SHA256

6dfad86ed6d038112e72b8b6654af86ab35dbcdb6bfd7f3f152aa214a5d7090d
SHA512

aacc67b822e7d27d2a15a06a7257a9d064c0befd375fac48819bbb0c4a26fb8456866d8f567cdab16ca8a6ae7efa6f3b756280b287dbd0c2e4c2909d2e07a35c
SSDEEP

393216:AYHeKMGUscJNGO72Saj+LF3u80pTuKp8VeqYsokUX:VXhpcW6LId3mV/UX

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1968	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	1968	7zFM.exe
Token: 35	1968	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1968	7zFM.exe

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\skeet.zip"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:1968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads