db1ac1bbba4f280c0ca239bba2755dafe72d050d9e5d56a577ee0a7660fc6ced

Analysis

max time kernel
63s
max time network
17s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
18/01/2025, 00:18

Target

Launcher_v1.4.9.9.zip
Size

3.7MB
MD5

dfdc538af7b3a8dc317b9b50b17bf423
SHA1

6da6ff1cd6f46df9ae09cf6b4cfa4c88fceefef9
SHA256

db1ac1bbba4f280c0ca239bba2755dafe72d050d9e5d56a577ee0a7660fc6ced
SHA512

84615e07412c7765fa6169ec4538be739da065405ed2f714888e767a252ab122ada4949f02f6b6b147047006aa749ea045ccbfe8bf20ef5a3c6314ae090208f9
SSDEEP

98304:u71Rr0JbetMI2xgGallTTs9z3fw57FKhy6nZyQXmbtMAdczX:41x0JbetM5Cxls9ja7FKh3cd0

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
1172	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1172	7zFM.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
1172	7zFM.exe
1172	7zFM.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1172 wrote to memory of 2952	1172	7zFM.exe	30
PID 1172 wrote to memory of 2952	1172	7zFM.exe	30
PID 1172 wrote to memory of 2952	1172	7zFM.exe	30

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Launcher_v1.4.9.9.zip"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:1172
- C:\Windows\system32\NOTEPAD.EXE
  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\7zO4942DFA7\Read me.txt
  2⤵
  PID:2952

C:\Users\Admin\AppData\Local\Temp\7zO4942DFA7\Read me.txt

Filesize
21B

MD5
1b1001b50ec2880a656a82884ea99075

SHA1
17d5379e1443cde363639d8eb7787db842307aef

SHA256
9e47d314de104ec433194891d99eac4b24344730d4b87c5ecc85b49b0f645794

SHA512
d6e42565573e64be48741151019ba1240f8676cd8102f18fa029be91b3d315865535768d7fee783882c3be9642c818223606e2d1d352955093276498955b1777

Download Submit