9968ab55e26a229e0f54c3a6b9a29b2733de2cadfaf844cc1c0039824185b2a8 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
29/01/2025, 22:41

Sharing

Report Analysis Logs

General

Target

Soft_Lаunсher.rar
Size

529KB
MD5

54f406da538776c7559d090083ab78e8
SHA1

f17ebaee90a6fdbcfb7d665dcb41136ceb763145
SHA256

9968ab55e26a229e0f54c3a6b9a29b2733de2cadfaf844cc1c0039824185b2a8
SHA512

f8695bb0ea566774512ac3862b443314ead332032ea75146ccfb17b0e08c0e9ffd4536ac94a5a94826be17f4f55eeb02e140fdda00234efa63577ab1f20ea4bf
SSDEEP

12288:Iw/fURfHuFsqJXSKEdbiOTUjaTnG6YVBS8:Iwjydb1omTIH

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	1812	7zFM.exe
Token: 35	1812	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1812	7zFM.exe

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Soft_Lаunсher.rar"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:1812

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads