37b3e95d25f5b91ce36726d310a736739739361d9fa9e9869e0700c71fff74e4 | Triage

Analysis

max time kernel
91s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
17-01-2025 13:34

Sharing

Report Analysis Logs

General

Target

sebwett (1).rar
Size

118.4MB
MD5

c3bc7cba6aa9654b8a98b2d1436bd0f8
SHA1

b55b61372f39e2c7cf3fa57f00cea65f36678418
SHA256

37b3e95d25f5b91ce36726d310a736739739361d9fa9e9869e0700c71fff74e4
SHA512

cb171fa60d955581c91c282242aa9f29b571b069c8daebac2041310f01125515552b77d70b8d465856f8c947b380c0ccd6a866a7f1ab1d3a73543460ae453319
SSDEEP

3145728:O8lM8lLLmheLj7XW5LcgQfWGrPy2nBkPO:BlblLihU7XeL31GrXyG

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	4456	7zFM.exe
Token: 35	4456	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4456	7zFM.exe

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\sebwett (1).rar"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:4456

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads