c39552926a046eca64dab7cafbc9002ae22d592cba749fa03b6416b4a299431d | Triage

Analysis

max time kernel
94s
max time network
121s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
20-01-2025 16:28

Sharing

Report Analysis Logs

General

Target

VanishRaider-main.rar
Size

61KB
MD5

3d15d9b5d05223d0b812f1f51eb05ecb
SHA1

7f0f19e7128f546193685be6efe39a2ec61d8175
SHA256

c39552926a046eca64dab7cafbc9002ae22d592cba749fa03b6416b4a299431d
SHA512

7c65b4fddf10687c119718d136e45c570c4a5f9bb2ddbb23731813b5975d79a91ec062d7722909ede8ced4ac5a6fdb654ca9f1780546f50400f5de095f088ef1
SSDEEP

1536:Dr1IdvkMfDOHKq7eATVeBN/zsGellftYnXHRsPgmVzfLmB:Dr1bcwDe7MHVYnXHRpiz0

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	2548	7zFM.exe
Token: 35	2548	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2548	7zFM.exe

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\VanishRaider-main.rar"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:2548

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads