Overview
overview
10Static
static
10sample.tar
windows7-x64
1sample.tar
windows10-2004-x64
8arsenal-ki...kit.sh
ubuntu-18.04-amd64
3arsenal-ki...kit.sh
debian-9-armhf
3arsenal-ki...kit.sh
debian-9-mips
3arsenal-ki...kit.sh
debian-9-mipsel
3arsenal-ki...ild.sh
ubuntu-18.04-amd64
1arsenal-ki...ild.sh
debian-9-armhf
1arsenal-ki...ild.sh
debian-9-mips
1arsenal-ki...ild.sh
debian-9-mipsel
1arsenal-ki...ild.sh
ubuntu-18.04-amd64
1arsenal-ki...ild.sh
debian-9-armhf
1arsenal-ki...ild.sh
debian-9-mips
1arsenal-ki...ild.sh
debian-9-mipsel
1arsenal-ki...64.dll
windows7-x64
1arsenal-ki...64.dll
windows10-2004-x64
8arsenal-ki...86.dll
windows7-x64
3arsenal-ki...86.dll
windows10-2004-x64
8arsenal-ki...64.dll
windows7-x64
1arsenal-ki...64.dll
windows10-2004-x64
8arsenal-ki...86.dll
windows7-x64
3arsenal-ki...86.dll
windows10-2004-x64
8arsenal-ki...64.dll
windows7-x64
1arsenal-ki...64.dll
windows10-2004-x64
8arsenal-ki...86.dll
windows7-x64
3arsenal-ki...86.dll
windows10-2004-x64
8arsenal-ki...64.dll
windows7-x64
1arsenal-ki...64.dll
windows10-2004-x64
arsenal-ki...86.dll
windows7-x64
3arsenal-ki...86.dll
windows10-2004-x64
8arsenal-ki...tor.sh
ubuntu-18.04-amd64
1arsenal-ki...tor.sh
debian-9-armhf
1Analysis
-
max time kernel
21s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
09-02-2025 05:38
Behavioral task
behavioral1
Sample
sample.tar
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral2
Sample
sample.tar
Resource
win10v2004-20250207-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
arsenal-kit/build_arsenal_kit.sh
Resource
ubuntu1804-amd64-20240611-en
ubuntu-18.04-amd64
Behavioral task
behavioral4
Sample
arsenal-kit/build_arsenal_kit.sh
Resource
debian9-armhf-20240418-en
debian-9-armhf
Behavioral task
behavioral5
Sample
arsenal-kit/build_arsenal_kit.sh
Resource
debian9-mipsbe-20240611-en
debian-9-mips
Behavioral task
behavioral6
Sample
arsenal-kit/build_arsenal_kit.sh
Resource
debian9-mipsel-20240611-en
debian-9-mipsel
Behavioral task
behavioral7
Sample
arsenal-kit/kits/artifact/build.sh
Resource
ubuntu1804-amd64-20240508-en
ubuntu-18.04-amd64
Behavioral task
behavioral8
Sample
arsenal-kit/kits/artifact/build.sh
Resource
debian9-armhf-20240611-en
debian-9-armhf
Behavioral task
behavioral9
Sample
arsenal-kit/kits/artifact/build.sh
Resource
debian9-mipsbe-20240729-en
debian-9-mips
Behavioral task
behavioral10
Sample
arsenal-kit/kits/artifact/build.sh
Resource
debian9-mipsel-20240418-en
debian-9-mipsel
Behavioral task
behavioral11
Sample
arsenal-kit/kits/mimikatz/build.sh
Resource
ubuntu1804-amd64-20240611-en
ubuntu-18.04-amd64
Behavioral task
behavioral12
Sample
arsenal-kit/kits/mimikatz/build.sh
Resource
debian9-armhf-20240611-en
debian-9-armhf
Behavioral task
behavioral13
Sample
arsenal-kit/kits/mimikatz/build.sh
Resource
debian9-mipsbe-20240729-en
debian-9-mips
Behavioral task
behavioral14
Sample
arsenal-kit/kits/mimikatz/build.sh
Resource
debian9-mipsel-20240418-en
debian-9-mipsel
Behavioral task
behavioral15
Sample
arsenal-kit/kits/mimikatz/mimikatz-chrome.x64.dll
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral16
Sample
arsenal-kit/kits/mimikatz/mimikatz-chrome.x64.dll
Resource
win10v2004-20250207-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
arsenal-kit/kits/mimikatz/mimikatz-chrome.x86.dll
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral18
Sample
arsenal-kit/kits/mimikatz/mimikatz-chrome.x86.dll
Resource
win10v2004-20250207-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
arsenal-kit/kits/mimikatz/mimikatz-full.x64.dll
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral20
Sample
arsenal-kit/kits/mimikatz/mimikatz-full.x64.dll
Resource
win10v2004-20250207-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
arsenal-kit/kits/mimikatz/mimikatz-full.x86.dll
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral22
Sample
arsenal-kit/kits/mimikatz/mimikatz-full.x86.dll
Resource
win10v2004-20250207-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
arsenal-kit/kits/mimikatz/mimikatz-max.x64.dll
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral24
Sample
arsenal-kit/kits/mimikatz/mimikatz-max.x64.dll
Resource
win10v2004-20250207-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
arsenal-kit/kits/mimikatz/mimikatz-max.x86.dll
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral26
Sample
arsenal-kit/kits/mimikatz/mimikatz-max.x86.dll
Resource
win10v2004-20250207-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
arsenal-kit/kits/mimikatz/mimikatz-min.x64.dll
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral28
Sample
arsenal-kit/kits/mimikatz/mimikatz-min.x64.dll
Resource
win10v2004-20250207-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
arsenal-kit/kits/mimikatz/mimikatz-min.x86.dll
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral30
Sample
arsenal-kit/kits/mimikatz/mimikatz-min.x86.dll
Resource
win10v2004-20250207-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
arsenal-kit/kits/mutator/docker_mutator.sh
Resource
ubuntu1804-amd64-20240611-en
ubuntu-18.04-amd64
Behavioral task
behavioral32
Sample
arsenal-kit/kits/mutator/docker_mutator.sh
Resource
debian9-armhf-20240729-en
debian-9-armhf
General
-
Target
sample.tar
-
Size
6.8MB
-
MD5
0dafc97918235429b5f61693a4b07c75
-
SHA1
e9088b9e704f491e69ea5f43b3cf23218407ced7
-
SHA256
80296f96f441ae50c626a68a585c76a1da42c690fdc5dda92a6b98501b8bd499
-
SHA512
674abe9a3995d54f2c0a8bfa6979d7b481bbc5aaa0eec1988b913e70df8f6b16be59eafdbb013cefec964cd8762606ff761e02811ad66f1d5d9904c3874aea50
-
SSDEEP
49152:iVrV7/4s9R/FhdotBjtp5kU359UKnVTOmXtrVi/qE37M45w63GKDVHsSvU2DXeim:kiAvmDZPPXtw3ZWYVVy1LlYbmd
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2296 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2296 7zFM.exe Token: 35 2296 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2296 7zFM.exe