0d1f8012e230a264ca5001a6273912c9e143a06fa045022a35bfe258fca9b77f | Triage

Analysis

max time kernel
149s
max time network
96s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
08-01-2025 00:12

Sharing

Report Analysis Logs

General

Target

Temp-Spoofer-main/minhook/Nouveau Archive WinRAR.rar
Size

24B
MD5

c69d0b5902a959577c02e9dcdda77de0
SHA1

6233724f8b3ac18649dc248d1c778e2bca78a7f2
SHA256

4301ec2e9592e7a22262d1c046954545033b73be322b33a8117d201556c4254b
SHA512

2e8945172ef567d4ae84d6317efce63502a6d9496caa48b8dc09cf12d1ceec3e89d033d6d9fceeba82f403107d15341bcdb72b4a6f60ba3e6df4d2a2cb6e48cd

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	3504	7zFM.exe
Token: 35	3504	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3504	7zFM.exe

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Temp-Spoofer-main\minhook\Nouveau Archive WinRAR.rar"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:3504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads