Resubmissions
22-01-2025 06:59
250122-hr77mstphv 813-01-2025 11:48
250113-nyfc4a1khx 723-12-2024 21:41
241223-1jv68asmbl 1Analysis
-
max time kernel
92s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
22-01-2025 06:59
Static task
static1
Behavioral task
behavioral1
Sample
a3b3fb652d4e22fcbb1b29c46ce48761c915441e1b83ebf61e591610623b4670.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a3b3fb652d4e22fcbb1b29c46ce48761c915441e1b83ebf61e591610623b4670.zip
Resource
win10v2004-20241007-en
General
-
Target
a3b3fb652d4e22fcbb1b29c46ce48761c915441e1b83ebf61e591610623b4670.zip
-
Size
107KB
-
MD5
568f5ff8a5884e1a59387105f85470b0
-
SHA1
bb532059d4fce8fc91851cea843b4186409d706c
-
SHA256
a3b3fb652d4e22fcbb1b29c46ce48761c915441e1b83ebf61e591610623b4670
-
SHA512
8f0ecd65dc3d9131d2d24600736a07acf70ced25e83f8c20b2bf0edc38afd1c889c18097793baeb248f93a73ded15e807104bf24a4f7a5067409dabd96e29385
-
SSDEEP
3072:Q1egkeFkCg78J+YCSii28tODZUB/mNAT4IGhrpJ:HgBkCg7vpmOK/1T4IGF
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4156 7zFM.exe Token: 35 4156 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4156 7zFM.exe