Overview
overview
10Static
static
4#Pa$$w0rD_...#$.zip
windows7-x64
10#Pa$$w0rD_...#$.zip
windows10-2004-x64
1#Pa$$w0rD_...p#$.7z
windows7-x64
1#Pa$$w0rD_...p#$.7z
windows10-2004-x64
1Resources/...w.phpt
windows7-x64
3Resources/...w.phpt
windows10-2004-x64
3Resources/...1.phpt
windows7-x64
3Resources/...1.phpt
windows10-2004-x64
3Resources/...8.phpt
windows7-x64
3Resources/...8.phpt
windows10-2004-x64
3Resources/...g.phpt
windows7-x64
3Resources/...g.phpt
windows10-2004-x64
3Resources/...007.js
windows7-x64
3Resources/...007.js
windows10-2004-x64
3Resources/...3.phpt
windows7-x64
3Resources/...3.phpt
windows10-2004-x64
3Resources/...007.js
windows7-x64
3Resources/...007.js
windows10-2004-x64
3Resources/...4.phpt
windows7-x64
3Resources/...4.phpt
windows10-2004-x64
3Resources/...01.ps1
windows7-x64
3Resources/...01.ps1
windows10-2004-x64
3Resources/...oard.h
windows7-x64
3Resources/...oard.h
windows10-2004-x64
3Resources/...6.phpt
windows7-x64
3Resources/...6.phpt
windows10-2004-x64
3Resources/...8.phpt
windows7-x64
3Resources/...8.phpt
windows10-2004-x64
3Resources/...1.phpt
windows7-x64
3Resources/...1.phpt
windows10-2004-x64
3Resources/...6/htwj
windows7-x64
1Resources/...6/htwj
windows10-2004-x64
1Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
06-01-2025 08:49
Behavioral task
behavioral1
Sample
#Pa$$w0rD__6654--0peɴ_Set-Up#$.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
#Pa$$w0rD__6654--0peɴ_Set-Up#$.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
#Pa$$w0rD__6654--0peɴ_Set-Up#$.7z
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
#Pa$$w0rD__6654--0peɴ_Set-Up#$.7z
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Resources/Data/x64/r4_groupH_simple_rpcenc_017w.phpt
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Resources/Data/x64/r4_groupH_simple_rpcenc_017w.phpt
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Resources/Data/x64/schema041.phpt
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
Resources/Data/x64/schema041.phpt
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Resources/Data/x64/ssa_bug_008.phpt
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Resources/Data/x64/ssa_bug_008.phpt
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Resources/Data/x64/template_cloning.phpt
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Resources/Data/x64/template_cloning.phpt
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Resources/Data/x64/try_multicatch_007.js
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Resources/Data/x64/try_multicatch_007.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
Resources/Data/x64/x86/T33.phpt
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Resources/Data/x64/x86/T33.phpt
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
Resources/Data/x64/x86/bug64007.js
Resource
win7-20241010-en
Behavioral task
behavioral18
Sample
Resources/Data/x64/x86/bug64007.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
Resources/Data/x64/x86/bug72094.phpt
Resource
win7-20241010-en
Behavioral task
behavioral20
Sample
Resources/Data/x64/x86/bug72094.phpt
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
Resources/Data/x64/x86/foreachLoop.001.ps1
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
Resources/Data/x64/x86/foreachLoop.001.ps1
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
Resources/Data/x64/x86/fpm_scoreboard.h
Resource
win7-20240729-en
Behavioral task
behavioral24
Sample
Resources/Data/x64/x86/fpm_scoreboard.h
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
Resources/Data/x64/x86/frontcontroller16.phpt
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
Resources/Data/x64/x86/frontcontroller16.phpt
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
Resources/Data/x64/x86/gh12908.phpt
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
Resources/Data/x64/x86/gh12908.phpt
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
Resources/Data/x64/x86/gh13991.phpt
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
Resources/Data/x64/x86/gh13991.phpt
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
Resources/Data/x64/x86/htwj
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
Resources/Data/x64/x86/htwj
Resource
win10v2004-20241007-en
General
-
Target
#Pa$$w0rD__6654--0peɴ_Set-Up#$.7z
-
Size
7.5MB
-
MD5
e2e4aa08af81749382abd08bdae9d5ad
-
SHA1
3310da15547d8bd20376399e4a5ac9543721500a
-
SHA256
b5dd13a6ac780c83b108281abc9b05ab60901556770fca27e0074243449d5b12
-
SHA512
96155e7076929f18205804a957a10e72e72717e1cf778a2c9e68ebff34773eafbeb0ae56a5d08e2d0d0ef979f8af9861fc9d976c26235ca4314e277a4ead3d0d
-
SSDEEP
196608:Pzsg208CQPnTFcwHHXWAF2zVmSEno4zxg:Yb0srHHXWAUs1u
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2264 7zFM.exe Token: 35 2264 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2264 7zFM.exe