Analysis
-
max time kernel
430s -
max time network
432s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
17-10-2024 16:14
General
-
Target
YDRAY-DESCARGAR-NOTIFICACION-DE-SENTENCIA-JUDICIAL-AGRADECEMOS-CONFIRMAR-RECIBIDO-1.7z
-
Size
1.0MB
-
MD5
4be392945a6b4b228f1889ac8bff5927
-
SHA1
2c9e287cb5619b9811b09b4830b327c48272b653
-
SHA256
421ff80415726f048213bed08a4d02f4c2f5a11af92893fc9ddc6b98e55db095
-
SHA512
031464c7548d9a7ee8a084cfe87871c250654e2b33921b5a03d84d3be279806167dc596d8410040655c2d1f542048eec38fab68847ce9dfbbf0573cec607330f
-
SSDEEP
24576:LbAtae9qGfn52ZCMXxxgH73/jIyBlKllmSZH8ymEEWrC:HIX99n5cCexxgbvjIyBgfm24EBm
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\YDRAY-DESCARGAR-NOTIFICACION-DE-SENTENCIA-JUDICIAL-AGRADECEMOS-CONFIRMAR-RECIBIDO-1.7z"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow