Analysis
-
max time kernel
148s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
06-01-2025 15:32
Behavioral task
behavioral1
Sample
Build.zip
Resource
win7-20241010-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Build.zip
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
Build.zip
-
Size
20.9MB
-
MD5
202c2cc945735ac0d31abe80e837f7fd
-
SHA1
08a29149a1048a74af1752190593e5096facf595
-
SHA256
490063206c1049e12cd3e29e7ae9a166950b48c074706aa4e45b467cc1738314
-
SHA512
886708183358a23dfa84769bab0a7ca5a7aab2e3928fa84d88893b46fa59636391266000be96aed1e4c8edac59e76e923d194cecb0ac0ee5ce95ad9cec4fc8fe
-
SSDEEP
393216:SuOdVhb6boN5DiEYKNvOwOGWkUURE0hZXR/uOdVhb6boN5DiEYKNvOwOGWkUUl:sLksNwjKNv2qFSEX7LksNwjKNv2qFl
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3028 7zFM.exe Token: 35 3028 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3028 7zFM.exe