Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
05-01-2025 13:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Fiddler Triage Pyinstaller shit.zip
Resource
win7-20241010-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Fiddler Triage Pyinstaller shit.zip
Resource
win10v2004-20241007-en
windows10-2004-x64
38 signatures
150 seconds
General
-
Target
Fiddler Triage Pyinstaller shit.zip
-
Size
9.8MB
-
MD5
d74316e7c7bb248880a6d3349fd27fcf
-
SHA1
639c91ac359884fe9cb6d41ef2171491f47bff40
-
SHA256
7372d669599c35de6b4bf6a158a947ae49e8a3a56742f9f3948be7d6d75e9172
-
SHA512
418b0e96155386cef61d666bbac37eb10b092dfd3f0abe6ac848ae11fa87eeccf2057b02724f70ecef65a5a3229052d98ba2d92aced8dad82c4ffd033b7a8404
-
SSDEEP
196608:G83Kl3QHFPGsGvoZhtbTEJji85s1tcICfiDs4ptQR6fCjt8F3bJ8XgJN:mBnubAi83ViDsRR6fCx8f8kN
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1956 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1956 7zFM.exe Token: 35 1956 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1956 7zFM.exe