dc0d189193c4f14229e8c4172c08b42923d538310f583c6a8375e781fe46730c | Triage

Analysis

max time kernel
13s
max time network
21s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
06-01-2025 09:04

Sharing

Report Analysis Logs

General

Target

my game.zip
Size

18.3MB
MD5

10e004e95b0c2a815c75d5513d37618b
SHA1

047a55f7e3a69bb95bf1829029a9e9856965ec8d
SHA256

dc0d189193c4f14229e8c4172c08b42923d538310f583c6a8375e781fe46730c
SHA512

3824c944a0a0c571eee0161756e0fb2fef4242fcd1cd6071c1dda0cc110ae1cdd8b62de6742568b2bade5333dd3ac3b48b3947f56fad3cec3a2ca29716d3e873
SSDEEP

393216:l6X5ypCyR1Afz+o3jGY+U9vjwOMoks939InEus5QJ/p397rJzLu:l6X5yW3jLjBMok639InI5QH9XZC

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2172	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	2172	7zFM.exe
Token: 35	2172	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2172	7zFM.exe

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\my game.zip"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:2172

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads