e308630fce1981ea146389004c428b4c2b2ea344cf707ddb32967846dfa56fa4 | Triage

Analysis

max time kernel
70s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20250217-en
resource tags

arch:x64arch:x86image:win10v2004-20250217-enlocale:en-usos:windows10-2004-x64system
submitted
06/03/2025, 09:22

Sharing

Report Analysis Logs

General

Target

voicemod pro 1.2.2.7 crack.exe.7z
Size

9.0MB
MD5

9c0dae31629226d0e1563d88b03d80aa
SHA1

d3d802b9489132439d124a455f6b4533549b841a
SHA256

e308630fce1981ea146389004c428b4c2b2ea344cf707ddb32967846dfa56fa4
SHA512

4dad21814287cc05b7073e6f8a3bb961beccb4d9c1a8808c3a687711fe119f143c48ea0b29a6d56617ed9d5d18bd329288017c220aeb9d0e2925bb60c5486b31
SSDEEP

196608:DI+/zfWO2XydJF9PdReulC/CYpUTzJI/0KEn75:smzfOuJF9PdwuldY6tcS1

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	4948	7zFM.exe
Token: 35	4948	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4948	7zFM.exe

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\voicemod pro 1.2.2.7 crack.exe.7z"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:4948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads