Analysis
- max time kernel
429s - max time network
438s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
10/01/2025, 18:44
Behavioral task
behavioral1
Sample
Release.zip
Resource
win7-20241023-en
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
Release.zip
Resource
win10v2004-20241007-en
2 signatures
900 seconds
General
- Target Release.zip
- Size 6.4MB
- Sample250110-xdjdpavmbl
- SHA256 e7b275d70655db9cb43fa606bbe2e4f22478ca4962bbf9f299d66eda567d63cd
- MD5 89661a9ff6de529497fec56a112bf75e
- SHA1 2dd31a19489f4d7c562b647f69117e31b894b5c3
- SHA512 33c765bf85fbec0e58924ece948b80a7d73b7577557eaac8865e481c61ad6b71f8b5b846026103239b3bd21f438ff0d7c1430a51a4a149f16a215faad6dab68f
- SSDEEP 196608:SYNI1S7C6S230UwVLW83FUSA7WQZzwM3/C2cM7m2:rNIs7CDvB1USA7WS/vcx2
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1076 7zFM.exe Token: 35 1076 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1076 7zFM.exe