3e6a57b6588c5f28123ac53555fb31aa7cd1952762ce0ec0723265cda6cc7ebd | Triage

Analysis

max time kernel
67s
max time network
19s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
22-01-2025 00:59

Sharing

Report Analysis Logs

General

Target

Setup.rar
Size

13KB
MD5

328e4fd31019c6526ca07e7b2877c163
SHA1

694004352c2d360f7260768879db399c2d945ab8
SHA256

844429cc84d4e82e492c68bbae2db4c7988b237d2a4ad3c94cca0273155b1ffb
SHA512

567c29f2d0f00e21e5004e750bbd468de634f2436ac783442b23527e24a7771d3f3910673ad0e669f6d52876dd72b517fd083a570187c8af84a4f290430867e9
SSDEEP

384:pPcte+fV/FnfqkEDJ8aP1w6go3F3WBIWEt:KRfVwfaaP1YLXq

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	2816	7zFM.exe
Token: 35	2816	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2816	7zFM.exe

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Setup.rar"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:2816

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads