Analysis Overview
SHA256
e0a9daae804fd0db158fd2f0a48c2179c7ac4b04223a1a02eed127e11876fcd6
Threat Level: Likely benign
The file Horizon DIAMOND.zip was found to be: Likely benign.
Malicious Activity Summary
Unsigned PE
MITRE ATT&CK
Analysis: static1
Detonation Overview
Reported
2024-06-20 11:02
Signatures
Unsigned PE
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
Analysis: behavioral1
Detonation Overview
Submitted
2024-06-20 11:02
Reported
2024-06-20 11:32
Platform
win7-20240221-en
Max time kernel
1563s
Max time network
1563s
Command Line
Signatures
Processes
C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\Horizon DIAMOND.zip"
Network
Files
Analysis: behavioral2
Detonation Overview
Submitted
2024-06-20 11:02
Reported
2024-06-20 11:32
Platform
win10v2004-20240508-en
Max time kernel
1692s
Max time network
1701s
Command Line
Signatures
Processes
C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\Horizon DIAMOND.zip"
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding