ea29144184f05acc5f0ce350e624e3ef8d1edc5954dede3e208105de5b700f41 | Triage

Analysis

max time kernel
95s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
18-01-2025 18:16

Sharing

Report Analysis Logs

General

Target

!Ǵe𝔱-Set_𝓤p--3315__Pǎ$$w0ɾD#!!.zip
Size

3.6MB
MD5

22ce8403d9dda64c32726d38c4287690
SHA1

dfb32356742e28f6265db932b602055e35e8d146
SHA256

ea29144184f05acc5f0ce350e624e3ef8d1edc5954dede3e208105de5b700f41
SHA512

61c79b9b8ab25c7caa6cb97c861d512c427d44216f4af69b0cb4129d231563c4c41cd2d37ed1292628e741f689493fcdfc3d211c762169ae3a095e2245a87827
SSDEEP

49152:jntmRkWYcofo3dpWRLXOtvtWF6rFE+UdJ:j2ufoNpWRrMB1U7

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	5020	7zFM.exe
Token: 35	5020	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5020	7zFM.exe

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\!Ǵe𝔱-Set_𝓤p--3315__Pǎ$$w0ɾD#!!.zip"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:5020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads