Analysis
-
max time kernel
119s -
max time network
154s -
platform
windows7_x64 -
resource
win7-20241023-en -
resource tags
-
submitted
03-05-2024 19:12
General
-
Target
Flightfactor Airbus A350 XWB Advanced 1.7.4Xplane11.rar
-
Size
808.6MB
-
MD5
e7b4c1f9ba05eedd05b3e5ac0000a14c
-
SHA1
bfc5aaaacfc0bead05d64f1a2fa819520f41a4bf
-
SHA256
55dee2423613c57989c30bf01e930b461ecd3380be7a4ab5c4defc59ca8528e3
-
SHA512
7c652fb9edf5c4df18cf02b4bcbbf2e47827c7269c9e03373c46fdf3bbbf2a9b26e1143f010be81d8e1e7fba05c38952546ef601c6584d49c1ca35a2f4b12b76
-
SSDEEP
25165824:d5ywswYf/7Q0Zn1WSAJa9Fq/Slz6CisNmB:dxHYfTdDWS/aTCAB
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Flightfactor Airbus A350 XWB Advanced 1.7.4Xplane11.rar"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow