bc845ab964ef0e15f09dc27adc16edb3381e9aac924d5787ef0046dbe62347d0 | Triage

Analysis

max time kernel
95s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
06-01-2025 08:59

Sharing

Report Analysis Logs

General

Target

#Pa$$w0rD__6654--0peɴ_Set-Up#$.7z
Size

7.5MB
MD5

e2e4aa08af81749382abd08bdae9d5ad
SHA1

3310da15547d8bd20376399e4a5ac9543721500a
SHA256

b5dd13a6ac780c83b108281abc9b05ab60901556770fca27e0074243449d5b12
SHA512

96155e7076929f18205804a957a10e72e72717e1cf778a2c9e68ebff34773eafbeb0ae56a5d08e2d0d0ef979f8af9861fc9d976c26235ca4314e277a4ead3d0d
SSDEEP

196608:Pzsg208CQPnTFcwHHXWAF2zVmSEno4zxg:Yb0srHHXWAUs1u

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	2496	7zFM.exe
Token: 35	2496	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2496	7zFM.exe

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\#Pa$$w0rD__6654--0peɴ_Set-Up#$.7z"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:2496

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads