Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
12-10-2024 05:08
General
-
Target
Exela-V2.0-main (1).zip
-
Size
578KB
-
MD5
1284123a329839e8c0f2db4687ab0de4
-
SHA1
f02e5610c7038857d1be6dfb2ca85daeb7a90f79
-
SHA256
f918a13dc2c83df5da9e9243a4f39420a40314c39982af4b4d402001e0968e39
-
SHA512
7313649e5f0c4eee7c2001ff531faf77c16408d44dee655e9185f9110e75f220afd5757f764faf05f9f385c42283050dc41668866c6e14100d9a656a15bc63fc
-
SSDEEP
12288:wBfguFY+SdywXfBslqY7b9ukR6lurtTLS+28Ym52hpKD6OFjIZfgWflLawb:afguFY+SXXSlqmxp6wtTLl27m5wp0fpc
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Exela-V2.0-main (1).zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow