Analysis
-
max time kernel
446s -
max time network
449s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20250113-en -
resource tags
arch:x64arch:x86image:win10ltsc2021-20250113-enlocale:en-usos:windows10-ltsc 2021-x64system -
submitted
25-01-2025 10:43
Static task
static1
Behavioral task
behavioral1
Sample
lossless scaling.zip
Resource
win10ltsc2021-20250113-en
Behavioral task
behavioral2
Sample
lossless scaling.zip
Resource
win11-20241007-en
Behavioral task
behavioral3
Sample
lossless scaling/Crack.bat
Resource
win10ltsc2021-20250113-en
Behavioral task
behavioral4
Sample
lossless scaling/Crack.bat
Resource
win11-20241007-en
Behavioral task
behavioral5
Sample
password 123.txt
Resource
win10ltsc2021-20250113-en
Behavioral task
behavioral6
Sample
password 123.txt
Resource
win11-20241023-en
General
-
Target
lossless scaling.zip
-
Size
16.6MB
-
MD5
0058b69db2d53fee60ccdd89644409f6
-
SHA1
71cb66ec0629c4bd8c1e8343a56cfeb10c70e877
-
SHA256
13a4ee1ad422e22d1b428cb6f9a449bd311ec7f3c8d0d1341a6f7dfaa5d015ea
-
SHA512
2187b50bc12330327eff3e6b1ff743bf8860ed4e4291bcba188f6faa7ac88865c0eaf94e5b9c033c1f1babb3a00fbaf239a527a52221048a57c9c948e2684f00
-
SSDEEP
393216:jNLBJPFcd+rf68HlGHLF7gAisqDfagNUTi1yswcTxe7M5vm/hgJ8FGaY:ZzFpBHlGHFgjswi0r13ZeAahu8Fe
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 5080 7zFM.exe Token: 35 5080 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5080 7zFM.exe