Overview
overview
10Static
static
3Pago.rar
windows7-x64
1Pago.rar
windows10-2004-x64
1Skery.exe
windows7-x64
7Skery.exe
windows10-2004-x64
10$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3Cyberangre...29.bus
windows7-x64
3Cyberangre...29.bus
windows10-2004-x64
3Cyberangre...ic.ini
windows7-x64
1Cyberangre...ic.ini
windows10-2004-x64
1Cyberangre...gon250
windows7-x64
3Cyberangre...gon250
windows10-2004-x64
3Cyberangre...51.jpg
windows7-x64
3Cyberangre...51.jpg
windows10-2004-x64
4Cyberangre...es.txt
windows7-x64
1Cyberangre...es.txt
windows10-2004-x64
1Cyberangre...gs.txt
windows7-x64
1Cyberangre...gs.txt
windows10-2004-x64
1Cyberangre...ry.pad
windows7-x64
3Cyberangre...ry.pad
windows10-2004-x64
3Cyberangre...rs.txt
windows7-x64
1Cyberangre...rs.txt
windows10-2004-x64
1Cyberangre...ns.txt
windows7-x64
1Cyberangre...ns.txt
windows10-2004-x64
1Cyberangre...ne.int
windows7-x64
3Cyberangre...ne.int
windows10-2004-x64
3Cyberangre...ca.rei
windows7-x64
3Cyberangre...ca.rei
windows10-2004-x64
3Analysis
- max time kernel
139s - max time network
143s - platform
windows10-2004_x64 - resource
win10v2004-20250217-en - resource tags
arch:x64arch:x86image:win10v2004-20250217-enlocale:en-usos:windows10-2004-x64system - submitted
19/02/2025, 19:10
Static task
static1
Behavioral task
behavioral1
Sample
Pago.rar
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral2
Sample
Pago.rar
Resource
win10v2004-20250217-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
Skery.exe
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral4
Sample
Skery.exe
Resource
win10v2004-20250217-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20250217-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
Cyberangreb/Acanthopterous29.bus
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral8
Sample
Cyberangreb/Acanthopterous29.bus
Resource
win10v2004-20250217-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
Cyberangreb/Aphthartodocetic.ini
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral10
Sample
Cyberangreb/Aphthartodocetic.ini
Resource
win10v2004-20250217-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
Cyberangreb/Repetatively/Fljtetndes.gon250
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral12
Sample
Cyberangreb/Repetatively/Fljtetndes.gon250
Resource
win10v2004-20250217-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
Cyberangreb/Repetatively/Innovativeness151.jpg
Resource
win7-20240729-en
windows7-x64
Behavioral task
behavioral14
Sample
Cyberangreb/Repetatively/Innovativeness151.jpg
Resource
win10v2004-20250217-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
Cyberangreb/Repetatively/desorienteres.txt
Resource
win7-20250207-en
windows7-x64
Behavioral task
behavioral16
Sample
Cyberangreb/Repetatively/desorienteres.txt
Resource
win10v2004-20250217-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
Cyberangreb/Repetatively/gennemskylnings.txt
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral18
Sample
Cyberangreb/Repetatively/gennemskylnings.txt
Resource
win10v2004-20250217-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
Cyberangreb/Repetatively/gerry.pad
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral20
Sample
Cyberangreb/Repetatively/gerry.pad
Resource
win10v2004-20250217-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
Cyberangreb/Repetatively/inkassogebyrers.txt
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral22
Sample
Cyberangreb/Repetatively/inkassogebyrers.txt
Resource
win10v2004-20250217-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
Cyberangreb/Repetatively/klasikkens.txt
Resource
win7-20240729-en
windows7-x64
Behavioral task
behavioral24
Sample
Cyberangreb/Repetatively/klasikkens.txt
Resource
win10v2004-20250217-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
Cyberangreb/Repetatively/opdateringssiderne.int
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral26
Sample
Cyberangreb/Repetatively/opdateringssiderne.int
Resource
win10v2004-20250217-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
Cyberangreb/Repetatively/pataca.rei
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral28
Sample
Cyberangreb/Repetatively/pataca.rei
Resource
win10v2004-20250217-en
windows10-2004-x64
General
- Target Pago.rar
- Size 649KB
- Sample250219-xvfdcsynw4
- SHA256 262d6420018c8000d4f95686b9b6862737b7bd46ca94916c0c23d4ae603a8e5f
- MD5 acb3c83c34db1b5d300a9a00c65e757f
- SHA1 a5e69df876fc79288ddf1eec674dcc2e250c713f
- SHA512 56af5d0d1522d12e0bbdfb36e55d0c79138a0a632272a40c98e427b5a805ef4ff13e7097425777f2d47d9542e46a3458354ccda5e204f1320193456ddc64014b
- SSDEEP 12288:RhYZQBSGaPmixXvShCt13Pc7JOglIXJjAC86hK1mFxeXSZk78RSb56U:jYZQQFZPHnhK1Mx4v7/l
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2228 7zFM.exe Token: 35 2228 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2228 7zFM.exe