63ef8d228af12a1c7ee1b815b368bcac59da3d41dd35d7be1fe72968e96578c4 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
07-01-2025 19:28

Sharing

Report Analysis Logs

General

Target

#Pa$$CŌ𝔻e--6698__OpeN-Setup&!#.7z
Size

917KB
MD5

3a14927593bba8d33a7f9404fa90b171
SHA1

0bbc976b1eae14b8c91cc35839fcb8743faa2642
SHA256

0422fac44159e855f7ac45bad8d9f1b57020924abe199102eee1c43d15d941af
SHA512

83e2d3f321b12a8ebe1071c55a30a5913170cf8fbe8596c9054ad8a6dd95d5cc10ec2f719df5b73116dad4b559757661f7fa4b2087501ad2296975b43a2e3469
SSDEEP

24576:T/SW/RR92LvUjQEBFJwc3KDHWFrupEU+5QSw:T5RUU8EB8c38sLBM

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	1180	7zFM.exe
Token: 35	1180	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1180	7zFM.exe

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\#Pa$$CŌ𝔻e--6698__OpeN-Setup&!#.7z"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:1180

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads