d595ab589662812007b211536b921b25367411546fbda83d33fa7ef29e9e7d6c | Triage

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
06-01-2025 02:55

Sharing

Report Analysis Logs

General

Target

Lime-MultiTool-main.zip
Size

8.5MB
MD5

2527f8ae11ff8284413efbafd309eebe
SHA1

0448d5f8e6127247cf928e3bc5f8c36a4a6b7166
SHA256

d595ab589662812007b211536b921b25367411546fbda83d33fa7ef29e9e7d6c
SHA512

7b01d5e244ea7e55f3a0f71d4f2ce3be105b9d268190e9999bb32aca4017a5096b02fb3c04b4826a54906a6005de66ca949b4232f10161b6c4016a6a5d2249bc
SSDEEP

196608:qvtyXaw/YhZIIdyMGkXmyQscGZ0UDh9eAxcqctMy4yU:qFyqEqIIdyMGkXUscGFDh9eAxYlU

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2372	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	2372	7zFM.exe
Token: 35	2372	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2372	7zFM.exe

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Lime-MultiTool-main.zip"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:2372

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads