Resubmissions
07/07/2026, 12:33
260707-pradyahz8x807/07/2026, 12:31
260707-pp6z5aez9m121/03/2025, 14:58
250321-scamya1vew420/03/2025, 14:08
250320-rfp2csxp14820/03/2025, 13:57
250320-q9rllsxpv68Analysis
- max time kernel
433s - max time network
434s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20250314-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20250314-enlocale:en-usos:windows10-ltsc_2021-x64system - submitted
20/03/2025, 14:08
Static task
static1
Behavioral task
behavioral1
Sample
MEMZ.7z
Resource
win10v2004-20250314-en
2 signatures
900 seconds
Behavioral task
behavioral2
Sample
MEMZ.7z
Resource
win10ltsc2021-20250314-en
2 signatures
900 seconds
Behavioral task
behavioral3
Sample
MEMZ.7z
Resource
win11-20250314-en
28 signatures
900 seconds
General
- Target MEMZ.7z
- Size 26KB
- Sample250320-rfp2csxp14
- SHA256 2d184aaf67d614bb106319ab1a80a5c0d8bfebd513e3fba51acf217ea527ea02
- MD5 01a6ebf12323106a7198f263e7ec8035
- SHA1 8b26cbaff6d6a51bf09d7e4666c80f8926c90034
- SHA512 eff9fb5303e9f6f602d6177dcf6f8660f18a2afc2771d1abc05fe2af7ec0a9b3e9640e1273de80b312947f7cf40431819359db95bc885aa9e13f71136d69146b
- SSDEEP 384:KvpMW/bhwnx2S9uYVWlbOpmf8lFmbFZWrZwhQ2w61VfqhcMFkq5nBhStS:KKEbtS9uYyKpmf4hr2w61Ehc9qDh
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4272 7zFM.exe Token: 35 4272 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4272 7zFM.exe