39b8d89f49c86b2a1f876763e3b4666749c85de715aa10aa96a00d5a2d83861a | Triage

Resubmissions

21/04/2025, 09:34

250421-ljrrga1rt5 10

21/04/2025, 09:28

250421-lffj2aytdt 7

Analysis

max time kernel
101s
max time network
106s
platform
windows11-21h2_x64
resource
win11-20250410-en
resource tags

arch:x64arch:x86image:win11-20250410-enlocale:en-usos:windows11-21h2-x64system
submitted
21/04/2025, 09:34

Sharing

Report Analysis Logs

General

Target

Iаuncher_v9.1.rar
Size

13.6MB
MD5

6adf66f995f52565c6f44edd024ad6d5
SHA1

4ced5eb46794194e90a0baf8d01d78efdaaa2a77
SHA256

39b8d89f49c86b2a1f876763e3b4666749c85de715aa10aa96a00d5a2d83861a
SHA512

0ccc86c3e6605299f2d24c7982e909af038ffc030e82426ac7cecf8f797e2b0122b18722056d381764056c21e340e8e01df1b1025764e7a9158d43cbcb944522
SSDEEP

393216:xTR2upwCQ5NKmlfv29/Vbrb3C48I5x2jUyt2jSVdXR/X:x8gwCQPJv29BHzfxdQ3R/

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	2744	7zFM.exe
Token: 35	2744	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2744	7zFM.exe

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Iаuncher_v9.1.rar"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:2744

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads