Analysis
-
max time kernel
818s -
max time network
457s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system -
submitted
05-01-2025 18:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Sоftware for cs2.rar
Resource
win10v2004-20241007-en
11 signatures
900 seconds
Behavioral task
behavioral2
Sample
Sоftware for cs2.rar
Resource
win11-20241007-en
3 signatures
900 seconds
General
-
Target
Sоftware for cs2.rar
-
Size
12.0MB
-
MD5
cc664a093e4f476da5a8f45418d3acfa
-
SHA1
9a0f2598cbaaa57209ea09c63563884bb9df2f67
-
SHA256
9ef5c1a004ebafc622407137f95bfa6a6bc1f00b1b6b7cc9a7999207c27aa80f
-
SHA512
7114022338a4d5d465c401c9f23c5ea1ab340a77855b86ab70d6f36de98d510cf1dc1d79876e71f76406cf0bfe3cc584b657cafb83c24d65a8d3c03da30cfeca
-
SSDEEP
196608:TbPdCLU17rpJUdD5sRnivPaW+pQLRZUQdSXrwiWklnTiQ2r60w1symgzbZ5gLJ:YC7rpJUJmhiv1AQL5erwhinTizr60Pyi
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5104 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 5104 7zFM.exe Token: 35 5104 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5104 7zFM.exe