Overview
overview
10Static
static
1IPTVPlayer...PN.rar
windows7-x64
1IPTVPlayer...PN.rar
windows10-2004-x64
1Description.txt
windows7-x64
1Description.txt
windows10-2004-x64
1Setup.rar
windows7-x64
1Setup.rar
windows10-2004-x64
1Setup/Clie...NU.txt
windows7-x64
1Setup/Clie...NU.txt
windows10-2004-x64
1Setup/DAC/...rk.txt
windows7-x64
1Setup/DAC/...rk.txt
windows10-2004-x64
1Setup/DAC/...Fx.txt
windows7-x64
1Setup/DAC/...Fx.txt
windows10-2004-x64
1Setup/Lice...NU.txt
windows7-x64
1Setup/Lice...NU.txt
windows10-2004-x64
1Setup/Setu...ll.bat
windows7-x64
10Setup/Setu...ll.bat
windows10-2004-x64
10Analysis
- max time kernel
63s - max time network
66s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
22/01/2025, 00:59
Static task
static1
Behavioral task
behavioral1
Sample
IPTVPlayerTOP+AtlasVPN.rar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
IPTVPlayerTOP+AtlasVPN.rar
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Description.txt
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Description.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Setup.rar
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
Setup.rar
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Setup/Client SDK/ODBC/170/License Terms/License_msodbcsql_ENU.txt
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Setup/Client SDK/ODBC/170/License Terms/License_msodbcsql_ENU.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Setup/DAC/bin/Redist_DACFramework.txt
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Setup/DAC/bin/Redist_DACFramework.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Setup/DAC/bin/en/License_DACFx.txt
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Setup/DAC/bin/en/License_DACFx.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Setup/License Terms/License_SQLNCLI_ENU.txt
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
Setup/License Terms/License_SQLNCLI_ENU.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
Setup/Setup-install.bat
Resource
win7-20240903-en
General
- Target IPTVPlayerTOP+AtlasVPN.rar
- Size 15KB
- Sample250122-bb5m9azrem
- SHA256 3e6a57b6588c5f28123ac53555fb31aa7cd1952762ce0ec0723265cda6cc7ebd
- MD5 68f863696b16de41cbf5f0e7ec14968d
- SHA1 bfcaa52f41706d149f3ff65bccbe981eb639fbe7
- SHA512 2a08d8249414b60aa1952ed3f6e211792e531e629fa3cd363865118426cf80f8f55b3bc0f3942992445312abfdcfde8cca3c55b23aa25bf25bb2d10c02448b05
- SSDEEP 384:qyfLeT1nNHinOqm9R3iUemIYtwBQasNjxFs0UwYq1umq:vLeTNYnARWJOKsNFFszwYq1u7
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 5092 7zFM.exe Token: 35 5092 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5092 7zFM.exe