Analysis

  • max time kernel
    94s
  • max time network
    138s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-01-2025 06:13

General

  • Target

    Silvestras Premium Proxy.zip

  • Size

    4.6MB

  • MD5

    c896589cb776f360eb2b6f145f3f53f2

  • SHA1

    5660dfaeeda5ff7594b8b3ea68e290331364b33a

  • SHA256

    e2309c682f782d178c25ed497026f05e6528bf3de4869ac7d7530a6360895592

  • SHA512

    c1c12a77f8bdb89a8a5e442317444e087513b66321822961b14e2c63818932ed6d36b3dd1057622c03325d7085488199e2243d3f5b3f92f3d15d5fefa7edb20b

  • SSDEEP

    98304:jNQB3kVkq8KsLyQgIElkFF2dDix2dfPkDgvm3mDWx7ykyUQ:jNZkqxsW+FU1I6fcDYWVyUQ

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Silvestras Premium Proxy.zip"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:676

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads