45e029e8782db3d21f09fd8bf11db72570a986080341825cc9cb7e0f8ede347a | Triage

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
08-01-2025 20:36

Sharing

Report Analysis Logs

General

Target

C2Panel-main.zip
Size

6.8MB
MD5

4e43830b5691e6bc19c4f23f8172d1ec
SHA1

ec1786ac30eccea44bfdec9590012995978f7cec
SHA256

45e029e8782db3d21f09fd8bf11db72570a986080341825cc9cb7e0f8ede347a
SHA512

c61ce2bf2c8c9ac8015699259a1aac69cecaa47215483883882f44bc101a20a13e501c8125552ba71d747698d7a017de6cedb7a1029fb5caf12bdc48411d688f
SSDEEP

196608:e2fvq2ComB5bpXRCX2Xmb8jYYr3t/WaIbfUognni:X2nNXRW2XOWvrd/WaIDUoCi

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	1076	7zFM.exe
Token: 35	1076	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1076	7zFM.exe

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\C2Panel-main.zip"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:1076

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads