Analysis
-
max time kernel
16s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
06-01-2025 02:47
Behavioral task
behavioral1
Sample
danger-multi-tool-main.zip
Resource
win7-20240729-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
danger-multi-tool-main.zip
Resource
win10v2004-20241007-en
collectioncredential_accessdefense_evasiondiscoveryexecutionpersistenceprivilege_escalationspywarestealerupx
windows10-2004-x64
43 signatures
150 seconds
General
-
Target
danger-multi-tool-main.zip
-
Size
8.5MB
-
MD5
e24553fa7e15ffdee78de1a9556c650b
-
SHA1
6f99b032f86cdb5ec6fe808edf2a219a0bc0f8ed
-
SHA256
c0c791bebc9acf7f1b1202a32a621adead08aff49252dfab9363b268d680b235
-
SHA512
422ebe03372d0ac0d82119025f5b348100d528688300e974be74bb7d60817b0c7a28387375e2f91b4c5ba18129cda950b5de64efe24e0ad4c7caf22d83ad205e
-
SSDEEP
196608:0vtyXaw/YhZII9yMGkXmyQscGZ0UDh9eAxcqctMy4yy:0FyqEqII9yMGkXUscGFDh9eAxYly
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1396 7zFM.exe Token: 35 1396 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1396 7zFM.exe