bc845ab964ef0e15f09dc27adc16edb3381e9aac924d5787ef0046dbe62347d0 | Triage

Analysis

max time kernel
94s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
06-01-2025 08:59

Sharing

Report Analysis Logs

General

Target

#Pa$$w0rD__6654--0peɴ_Set-Up#$.zip
Size

7.5MB
MD5

b82b154592009655f2431f3c3e8537c2
SHA1

14a1e65bb14a1c3374b092403fae84514440465c
SHA256

bc845ab964ef0e15f09dc27adc16edb3381e9aac924d5787ef0046dbe62347d0
SHA512

c6cd3afe1cb5888a96ba0dad7e12f359a8cfeb54a36edbfe3b46784174786a1f9db0cb6c6a219839c011779e619609a766bd5ee1de45ec716299dfeffbec873a
SSDEEP

196608:jzsg208CQPnTFcwHHXWAF2zVmSEno4zx8:Mb0srHHXWAUs1e

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	1048	7zFM.exe
Token: 35	1048	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1048	7zFM.exe

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\#Pa$$w0rD__6654--0peɴ_Set-Up#$.zip"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:1048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads