Overview
overview
10Static
static
5Envio de d...6).zip
windows7-x64
5Envio de d...6).zip
windows10-2004-x64
1d789879fb4...f9.eml
windows7-x64
5d789879fb4...f9.eml
windows10-2004-x64
3COMPROBANT...df.zip
windows7-x64
1COMPROBANT...df.zip
windows10-2004-x64
1COMPROBANT...df.exe
windows7-x64
3COMPROBANT...df.exe
windows10-2004-x64
10email-plain-1.txt
windows7-x64
1email-plain-1.txt
windows10-2004-x64
1Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20241023-en -
resource tags
arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system -
submitted
14-01-2025 15:06
Static task
static1
Behavioral task
behavioral1
Sample
Envio de documento OC016 PAGO192025.Pdf-password(2Qo0Qsm6).zip
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
Envio de documento OC016 PAGO192025.Pdf-password(2Qo0Qsm6).zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
d789879fb4a6c42171f2cb73a8d85d094629eea7ae02f74d55263403b6358ef9.eml
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
d789879fb4a6c42171f2cb73a8d85d094629eea7ae02f74d55263403b6358ef9.eml
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
COMPROBANTE FAC PAG 1312025pdf.zip
Resource
win7-20241023-en
Behavioral task
behavioral6
Sample
COMPROBANTE FAC PAG 1312025pdf.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
COMPROBANTE FAC PAG 1312025pdf.exe
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
COMPROBANTE FAC PAG 1312025pdf.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
email-plain-1.txt
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
email-plain-1.txt
Resource
win10v2004-20241007-en
General
-
Target
COMPROBANTE FAC PAG 1312025pdf.zip
-
Size
630KB
-
MD5
7ffa7bd8790d363f6ce75a196fbfaaa3
-
SHA1
24988819575beb787dcc8ea750fc7a34212d66d8
-
SHA256
f74672bff56ee501992e93951a793b71e7850902a4f25a00616129aa5cad1edc
-
SHA512
63d5972b6a5d4a203fbc622cdf09a423f6d8f179200d2b3727945454a01e03981747b051a4b85999837d00f7b9601dad7db6f282ec3feb0377e6f3f00073fc28
-
SSDEEP
12288:QXICvZqhH4xGcIKho8cGZOLmBE6tlNuyoisvbXC0AOIUPR7GIzixVx:kIQLGcPhwGZmmBE6XNnRejH1GIzkT
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 472 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 472 7zFM.exe Token: 35 472 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 472 7zFM.exe