Overview
overview
10Static
static
3installer_....9.zip
windows7-x64
1installer_....9.zip
windows10-2004-x64
1Read me be...rt.txt
windows7-x64
1Read me be...rt.txt
windows10-2004-x64
1installer_....9.rar
windows7-x64
1installer_....9.rar
windows10-2004-x64
1Lang/lang-1049.dll
windows7-x64
1Lang/lang-1049.dll
windows10-2004-x64
1Lang/lang-1058.dll
windows7-x64
1Lang/lang-1058.dll
windows10-2004-x64
1avcodec-58.dll
windows7-x64
1avcodec-58.dll
windows10-2004-x64
1installer_....9.exe
windows7-x64
10installer_....9.exe
windows10-2004-x64
10.data
windows7-x64
3.data
windows10-2004-x64
3.rdata
windows7-x64
3.rdata
windows10-2004-x64
3.reloc
windows7-x64
3.reloc
windows10-2004-x64
3.rsrc/DIALOG/105
windows7-x64
1.rsrc/DIALOG/105
windows10-2004-x64
1.rsrc/DIALOG/106
windows7-x64
1.rsrc/DIALOG/106
windows10-2004-x64
1.rsrc/DIALOG/111
windows7-x64
1.rsrc/DIALOG/111
windows10-2004-x64
1.rsrc/GROUP_ICON/103
windows7-x64
1.rsrc/GROUP_ICON/103
windows10-2004-x64
1.rsrc/ICON/1.png
windows7-x64
3.rsrc/ICON/1.png
windows10-2004-x64
3.rsrc/ICON/2.png
windows7-x64
3.rsrc/ICON/2.png
windows10-2004-x64
3Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
06-01-2025 21:58
Static task
static1
Behavioral task
behavioral1
Sample
installer_1.05_36.9.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
installer_1.05_36.9.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Read me before you start.txt
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Read me before you start.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
installer_1.05_36.9.rar
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
installer_1.05_36.9.rar
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Lang/lang-1049.dll
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
Lang/lang-1049.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Lang/lang-1058.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Lang/lang-1058.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
avcodec-58.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
avcodec-58.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
installer_1.05_36.9.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
installer_1.05_36.9.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
.data
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
.data
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
.rdata
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
.rdata
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
.reloc
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
.reloc
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
.rsrc/DIALOG/105
Resource
win7-20241010-en
Behavioral task
behavioral22
Sample
.rsrc/DIALOG/105
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
.rsrc/DIALOG/106
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
.rsrc/DIALOG/106
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
.rsrc/DIALOG/111
Resource
win7-20241023-en
Behavioral task
behavioral26
Sample
.rsrc/DIALOG/111
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
.rsrc/GROUP_ICON/103
Resource
win7-20240729-en
Behavioral task
behavioral28
Sample
.rsrc/GROUP_ICON/103
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
.rsrc/ICON/1.png
Resource
win7-20241010-en
Behavioral task
behavioral30
Sample
.rsrc/ICON/1.png
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
.rsrc/ICON/2.png
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
.rsrc/ICON/2.png
Resource
win10v2004-20241007-en
General
-
Target
installer_1.05_36.9.zip
-
Size
20.8MB
-
MD5
e866021c606a52158525d4f2df67a5cd
-
SHA1
bdb711c91b37bcf9306d53c396441eab5d0f4fbc
-
SHA256
e883775711e2df54fc98181d782ede135d1b5e212594fe59cb9e75be5cdfaaa6
-
SHA512
61432fdd6a5a7744ed37359cbe98786981fed6fc32795179267a571904323ea69c500b3c2cb5bd2c6572d34c212ed9bb1c1d9e5a73c5e27d95d8c8989ea7f569
-
SSDEEP
393216:NZmphOyRvFL6UdiB5nFxhmRvmJiS7+dMA/bYomtmx6YDjN1fxRS:NZmphOyRtJiBHKR+4MA/EpQvPxQ
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3412 7zFM.exe Token: 35 3412 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3412 7zFM.exe