bdaeb579a58bcd99b70987a9ae1175736d49e6becb2c2bb59a15c0741ff95d67

Resubmissions

26-01-2025 18:59

26-01-2025 13:02

max time kernel
7s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
26-01-2025 18:59

Target

Sleezy Temp quacked.rar
Size

86.9MB
MD5

c2d50b373bcee770333642d84c717dc0
SHA1

4e0436b7a96d20cd0ffc8f1ba370f4041138f48c
SHA256

bdaeb579a58bcd99b70987a9ae1175736d49e6becb2c2bb59a15c0741ff95d67
SHA512

335cca8af355e3ec78c2e6227484dffad13fd3f659ce1eb76d99d12248882a55f8c1d6a91b6a7daf66853338b50ea525f05ed5477ef40a50ed1ae507a258efd3
SSDEEP

1572864:2D68+DBuV0ED0qUBnXuPPCctDIPWhgwSi+DPBn/lu+LvAI8iUsorbxAAAQPg:c68+DBuVR4qUBnXcFIP6Si+jBn/l7LvX

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2352	Sleezy Temp quacked.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6092	7zFM.exe
6092	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
6092	7zFM.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
6092	7zFM.exe
6092	7zFM.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 6092 wrote to memory of 2352	6092	7zFM.exe	77
PID 6092 wrote to memory of 2352	6092	7zFM.exe	77

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Sleezy Temp quacked.rar"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:6092
- C:\Users\Admin\AppData\Local\Temp\7zOCC7C56E7\Sleezy Temp quacked.exe
  "C:\Users\Admin\AppData\Local\Temp\7zOCC7C56E7\Sleezy Temp quacked.exe"
  2⤵
  - Executes dropped EXE
  PID:2352

C:\Users\Admin\AppData\Local\Temp\7zOCC7C56E7\Sleezy Temp quacked.exe

Filesize
654KB

MD5
96a7654fb6e5289f85b22d1109f607d3

SHA1
be18a6870defd229ab8f031c6cf7404bcc27bb28

SHA256
73c95001186d43a8886a61aac7c8b4f6f69a616e0f0b4be108468b992ebdd899

SHA512
97f211c69ff2e2bc5fd8f37153794b6fd62ef27dfbdeaa48fdae87507ce097c0084c65ebccd0b34e863a8c88a5f486fe74bae08ce32914f68bdf288c674baed8

Download Submit