Analysis

  • max time kernel
    818s
  • max time network
    457s
  • platform
    windows11-21h2_x64
  • resource
    win11-20241007-en
  • resource tags

    arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    05-01-2025 18:48

General

  • Target

    Sоftware for cs2.rar

  • Size

    12.0MB

  • MD5

    cc664a093e4f476da5a8f45418d3acfa

  • SHA1

    9a0f2598cbaaa57209ea09c63563884bb9df2f67

  • SHA256

    9ef5c1a004ebafc622407137f95bfa6a6bc1f00b1b6b7cc9a7999207c27aa80f

  • SHA512

    7114022338a4d5d465c401c9f23c5ea1ab340a77855b86ab70d6f36de98d510cf1dc1d79876e71f76406cf0bfe3cc584b657cafb83c24d65a8d3c03da30cfeca

  • SSDEEP

    196608:TbPdCLU17rpJUdD5sRnivPaW+pQLRZUQdSXrwiWklnTiQ2r60w1symgzbZ5gLJ:YC7rpJUJmhiv1AQL5erwhinTizr60Pyi

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Sоftware for cs2.rar"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:5104

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads