Resubmissions

06-01-2025 13:52

250106-q6fd6sxrfx 10

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    06-01-2025 13:52

General

  • Target

    RDR2-Online-V2-v2--Cheat.zip

  • Size

    7.4MB

  • MD5

    f55d6171ae497154d8de874101e1405e

  • SHA1

    18d8e63324c1da69bb29c9ecde08dced7f250862

  • SHA256

    5bd1981e9a8b2c17a40c5db9a7af9e3cbbd8893bc08ea678dec0daf55efb2d59

  • SHA512

    4cb058bade66aa58fbe6fc54671facd5eff9162de64d1a2a3dc0ac7739cbf5c4de363ff335f2b5fd4f5026227cc5aa112fbc5407d5f6a5d900fd8741b6866461

  • SSDEEP

    196608:h/GKyUj/Vwvy+TGLQDkyE9+UYPco2+KNHreh3aFhAaAg:x/yUrVw6+/DkpBo2+KN6lKhvt

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\RDR2-Online-V2-v2--Cheat.zip"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:2716

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads