2e96258f3dd21d059f59831295d32d324a849c87bc5a2149a49c97fcf5783558

Login
Reports

Overview

overview

Static

static

Malware.2024.12.25.7z

windows7-x64

Malware.2024.12.25.7z

windows10-2004-x64

2024-12-25...19.exe

windows7-x64

2024-12-25...19.exe

windows10-2004-x64

2024-12-25...8a.pdf

windows7-x64

2024-12-25...8a.pdf

windows10-2004-x64

2024-12-25...0d.pdf

windows7-x64

2024-12-25...0d.pdf

windows10-2004-x64

2024-12-25...96.exe

windows7-x64

2024-12-25...96.exe

windows10-2004-x64

2024-12-25...61.exe

windows7-x64

2024-12-25...61.exe

windows10-2004-x64

2024-12-25...03.pdf

windows7-x64

2024-12-25...03.pdf

windows10-2004-x64

2024-12-25...62.exe

windows7-x64

2024-12-25...62.exe

windows10-2004-x64

2024-12-25...25.exe

windows7-x64

2024-12-25...25.exe

windows10-2004-x64

2024-12-25...6b.exe

windows7-x64

2024-12-25...6b.exe

windows10-2004-x64

2024-12-25...ec.exe

windows7-x64

2024-12-25...ec.exe

windows10-2004-x64

2024-12-25...cc.exe

windows7-x64

2024-12-25...cc.exe

windows10-2004-x64

2024-12-25...3a.exe

windows7-x64

2024-12-25...3a.exe

windows10-2004-x64

2024-12-25...66.exe

windows7-x64

2024-12-25...66.exe

windows10-2004-x64

2024-12-25...97.exe

windows7-x64

2024-12-25...97.exe

windows10-2004-x64

2024-12-25...1d.pdf

windows7-x64

2024-12-25...1d.pdf

windows10-2004-x64

Analysis

max time kernel
135s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20250129-en
resource tags

arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system
submitted
31/01/2025, 17:40

Sharing

Copy URL Twitter E-mail

Static task

static1

31 signatures

Behavioral task

behavioral1

Sample

Malware.2024.12.25.7z

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

Malware.2024.12.25.7z

Resource

win10v2004-20250129-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

2024-12-25/unknown-df6ecbdc8f043bbe3a4018a4fd3734c474761e1c7505fb0917df4fb808087e19.exe

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

2024-12-25/unknown-df6ecbdc8f043bbe3a4018a4fd3734c474761e1c7505fb0917df4fb808087e19.exe

Resource

win10v2004-20250129-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

2024-12-25/unknown-e0b170a4440b174bb3d6bd6c5abb8833cd7eae6eadc74d4176c8bb8a4b38ca8a.pdf

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral6

Sample

2024-12-25/unknown-e0b170a4440b174bb3d6bd6c5abb8833cd7eae6eadc74d4176c8bb8a4b38ca8a.pdf

Resource

win10v2004-20241007-en

windows10-2004-x64

7 signatures

150 seconds

discovery

Behavioral task

behavioral7

Sample

2024-12-25/unknown-e1e08ee8a9d8d42268b3537c74ec3f099dc05a1cf1fd91d3c1e54084957c570d.pdf

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral8

Sample

2024-12-25/unknown-e1e08ee8a9d8d42268b3537c74ec3f099dc05a1cf1fd91d3c1e54084957c570d.pdf

Resource

win10v2004-20250129-en

windows10-2004-x64

7 signatures

150 seconds

discovery

Behavioral task

behavioral9

Sample

2024-12-25/unknown-e1ffabc651f471b8d4141420d8e171310bc91a400462062ca96f6ac202a0a896.exe

Resource

win7-20240708-en

windows7-x64

6 signatures

150 seconds

discovery

Behavioral task

behavioral10

Sample

2024-12-25/unknown-e1ffabc651f471b8d4141420d8e171310bc91a400462062ca96f6ac202a0a896.exe

Resource

win10v2004-20250129-en

windows10-2004-x64

5 signatures

150 seconds

discovery

Behavioral task

behavioral11

Sample

2024-12-25/unknown-e2c57dce7eb054b47a8f96e8be747b91ad1fce0bc0de597c9d41fce2623d9361.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

2024-12-25/unknown-e2c57dce7eb054b47a8f96e8be747b91ad1fce0bc0de597c9d41fce2623d9361.exe

Resource

win10v2004-20250129-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

2024-12-25/unknown-e3dcabde5987c263aef8243cba944e442658bfcf1ad19ebbd7c78b89be0ab203.pdf

Resource

win7-20240729-en

windows7-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral14

Sample

2024-12-25/unknown-e3dcabde5987c263aef8243cba944e442658bfcf1ad19ebbd7c78b89be0ab203.pdf

Resource

win10v2004-20250129-en

windows10-2004-x64

7 signatures

150 seconds

discovery

Behavioral task

behavioral15

Sample

2024-12-25/unknown-e49324f54cdf00a226d1779157391c9c260ddb6a5179ece3276f326052b95962.exe

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

lumma stealer

Behavioral task

behavioral16

Sample

2024-12-25/unknown-e49324f54cdf00a226d1779157391c9c260ddb6a5179ece3276f326052b95962.exe

Resource

win10v2004-20250129-en

windows10-2004-x64

3 signatures

150 seconds

lumma discovery stealer

Behavioral task

behavioral17

Sample

2024-12-25/unknown-e4c4e59c66b650e0d696b6ec194d61637a688293cd5e23be9c630f7748c74125.exe

Resource

win7-20241010-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

2024-12-25/unknown-e4c4e59c66b650e0d696b6ec194d61637a688293cd5e23be9c630f7748c74125.exe

Resource

win10v2004-20250129-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

2024-12-25/unknown-e668037208d053a72e197f6b156805776bf8bd8823c0b850d7c6302e22eb726b.exe

Resource

win7-20240903-en

windows7-x64

9 signatures

150 seconds

berbew backdoor discovery persistence

Behavioral task

behavioral20

Sample

2024-12-25/unknown-e668037208d053a72e197f6b156805776bf8bd8823c0b850d7c6302e22eb726b.exe

Resource

win10v2004-20250129-en

windows10-2004-x64

9 signatures

150 seconds

berbew backdoor discovery persistence

Behavioral task

behavioral21

Sample

2024-12-25/unknown-e8c053991c3618b30dde741da46435044fd5ae153f78c53f526f0de329fd43ec.exe

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

2024-12-25/unknown-e8c053991c3618b30dde741da46435044fd5ae153f78c53f526f0de329fd43ec.exe

Resource

win10v2004-20250129-en

windows10-2004-x64

1 signatures

150 seconds

discovery

Behavioral task

behavioral23

Sample

2024-12-25/unknown-ea34039dbd854222e03748c548a5210e552bbfaa600ae0f24dfb55397a3136cc.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

2024-12-25/unknown-ea34039dbd854222e03748c548a5210e552bbfaa600ae0f24dfb55397a3136cc.exe

Resource

win10v2004-20250129-en

windows10-2004-x64

1 signatures

150 seconds

discovery

Behavioral task

behavioral25

Sample

2024-12-25/unknown-ebf18c1982c1ceec0f808a2e8a8b1fc11970a2483e2c92dc121d38292141ab3a.exe

Resource

win7-20240903-en

windows7-x64

7 signatures

150 seconds

blackmoon banker discovery trojan upx

Behavioral task

behavioral26

Sample

2024-12-25/unknown-ebf18c1982c1ceec0f808a2e8a8b1fc11970a2483e2c92dc121d38292141ab3a.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

7 signatures

150 seconds

blackmoon banker discovery trojan upx

Behavioral task

behavioral27

Sample

2024-12-25/unknown-ec6a36915e9f9d331e80881a2336503416fc441a599fec36e2601e6f27229b66.exe

Resource

win7-20240729-en

windows7-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral28

Sample

2024-12-25/unknown-ec6a36915e9f9d331e80881a2336503416fc441a599fec36e2601e6f27229b66.exe

Resource

win10v2004-20250129-en

windows10-2004-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral29

Sample

2024-12-25/unknown-ed34607d35c3e5e97ce126000df93ecdcc854d9e7bde1ee42e08b243df314697.exe

Resource

win7-20240903-en

windows7-x64

16 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation trojan

Behavioral task

behavioral30

Sample

2024-12-25/unknown-ed34607d35c3e5e97ce126000df93ecdcc854d9e7bde1ee42e08b243df314697.exe

Resource

win10v2004-20250129-en

windows10-2004-x64

16 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation trojan

Behavioral task

behavioral31

Sample

2024-12-25/unknown-ed52a60eea60738501367935811e2f8a9ffe366ff9656cca8d4d9c78555d581d.pdf

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral32

Sample

2024-12-25/unknown-ed52a60eea60738501367935811e2f8a9ffe366ff9656cca8d4d9c78555d581d.pdf

Resource

win10v2004-20250129-en

windows10-2004-x64

7 signatures

150 seconds

discovery

Report Analysis Logs

General

Target
Malware.2024.12.25.7z
Size 359.1MB
Sample250131-v87nnasmdv
SHA256 2e96258f3dd21d059f59831295d32d324a849c87bc5a2149a49c97fcf5783558
MD5 2773b9f8be935e4a903c1925dcf9d054
SHA1 2c558feafd59d269472fbf3fee4cae8a0b085b0a
SHA512 0fc4adc14ff767e107db9fc21dce50330805a58eee6fe075ba2328ba4b8b8ff4922eb79df2a53a9505ac8d2f591e35d0b2887e3ea23ff4f02f92e8b50427e52b
SSDEEP 6291456:DUgWs0RbrHe8lNBENzpb6wGjZygOOKPZVa9nl/EuT5U1PlU9eK8DK:cs0Rr+SypCty9a+zlU9iDK
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	736	7zFM.exe
Token: 35	736	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
736	7zFM.exe

Processes

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Malware.2024.12.25.7z"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:736

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads