Resubmissions
03-11-2024 04:21
241103-eyv9watrcv 1013-10-2024 20:42
241013-zhc4kssamk 313-10-2024 20:24
241013-y6z3ks1dpm 1013-10-2024 20:20
241013-y4h2aawfqa 1013-10-2024 20:03
241013-ysz6eszflr 1013-10-2024 19:58
241013-yp33xazeln 1013-10-2024 19:48
241013-yh3tkazbmq 10Analysis
-
max time kernel
18s -
max time network
5s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
13-10-2024 20:42
General
-
Target
Week7.zip
-
Size
4.2MB
-
MD5
0c4a607fa0d0267adbe07ebc8c7036f0
-
SHA1
4e1a29a2d2568092068d7cfa844e1eb523f0e955
-
SHA256
2f634bac7eae57158b793fd4cd79f6451b9c19f78e6d25d2e26e2ec67afa2d7a
-
SHA512
552cff42a086a425cd7be65a632b373536167d7b90e5d58d279e65f1a916c906cb88a2ea1625033c8e3a843efaff5fedd9bf6116d638d2c06aa6f960a6b1acaf
-
SSDEEP
98304:KMz8i2FJyNSyOoAON2QrV9kbl5JFEJuQMkU6U6vnLk3Mx:K9JywvoVIlzeMZSk8x
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
-
Suspicious use of FindShellTrayWindow 3 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Week7.zip"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow