Overview
overview
10Static
static
1!@Set-𝓤...##.zip
windows7-x64
1!@Set-𝓤...##.zip
windows10-2004-x64
1#Set-Up--6...e#!.7z
windows7-x64
1#Set-Up--6...e#!.7z
windows10-2004-x64
1Satup_32--...up.exe
windows7-x64
10Satup_32--...up.exe
windows10-2004-x64
10Pa$$__ 6649.jpg
windows7-x64
1Pa$$__ 6649.jpg
windows10-2004-x64
4Read.me.txt
windows7-x64
1Read.me.txt
windows10-2004-x64
1Resubmissions
29/01/2025, 16:46
250129-t95p1sskfl 1029/01/2025, 16:44
250129-t8xb9atjaw 329/01/2025, 15:43
250129-s5zsjazrgm 10Analysis
-
max time kernel
91s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
29/01/2025, 15:43
Static task
static1
Behavioral task
behavioral1
Sample
!@Set-𝓤p__6649--!P𝕒$$w0ɾ𝓓##.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
!@Set-𝓤p__6649--!P𝕒$$w0ɾ𝓓##.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
#Set-Up--6649__Pα$$C0Ḏe#!.7z
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
#Set-Up--6649__Pα$$C0Ḏe#!.7z
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Satup_32--64Bit/setup.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Satup_32--64Bit/setup.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Pa$$__ 6649.jpg
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Pa$$__ 6649.jpg
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Read.me.txt
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Read.me.txt
Resource
win10v2004-20241007-en
General
-
Target
#Set-Up--6649__Pα$$C0Ḏe#!.7z
-
Size
950KB
-
MD5
62e8168d9e65361182c37bf300d21fa9
-
SHA1
075e60a8ef3c9e2da8537ae32acb870de2025cc3
-
SHA256
f59bc1b64c51d20e719ed21e198637e0344dc6036711002a46b4977fd5fe2617
-
SHA512
eea1c92f601b2d14843cd6bade6e3b6a988561d03b44984886fd12e9316b2331e5a7c14051304e68e00f748a7a810b0a4b862cfbfe9d8c7396da92415ad92ed6
-
SSDEEP
24576:c85w+236YkSh/1uKBwtUz11G2R+TsCna+GOpP+xHVagFim0hXm:cKx2zrnGZnaWmxHDbsW
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2464 7zFM.exe Token: 35 2464 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2464 7zFM.exe