Analysis
-
max time kernel
122s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20250207-en -
resource tags
arch:x64arch:x86image:win7-20250207-enlocale:en-usos:windows7-x64system -
submitted
21/03/2025, 17:52
Static task
static1
Behavioral task
behavioral1
Sample
hookfor60.rar
Resource
win7-20250207-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
hookfor60.rar
Resource
win10v2004-20250314-en
11 signatures
150 seconds
General
-
Target
hookfor60.rar
-
Size
5.9MB
-
MD5
645eb7ce7ffa114153dc1b67fa157d8c
-
SHA1
b900c6f09c33409d844fc19c7aaa309e3520bb0f
-
SHA256
77f155b8f6e0aa230e69aab203d4cf3f2d4323a30c4e876bc9ca9f0cda11ae21
-
SHA512
26d62f9dfc65e40b56ff3ea950b0c50dec852062f236252636c6b0e78c55a7feadc29ee5f88f27f042f6ed95850a64be47bfb244fca173ef8d10e39eb4d85588
-
SSDEEP
98304:HhigvY/b2Hs3EWLYWrr0hslpOgiXfH/ZMjadCet7UKnPnmQ9mKMWZf+oFX3j:HhZvQqs397rr0hslpOgmffZR2KnvXR2E
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 236 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 236 7zFM.exe Token: 35 236 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 236 7zFM.exe