Analysis
-
max time kernel
138s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
18-10-2024 00:50
General
-
Target
Toolify Self Bot (1).zip
-
Size
45.8MB
-
MD5
fdfaa170b30f82aa65ef0764ad64bab7
-
SHA1
8a2589e9c24368296d6221c20e4b47e70b7adeff
-
SHA256
c91917696b589529ae0794d2277d1f64dbeca7a359ea027e9e62dc82857cdd7c
-
SHA512
e0756cd3c5c39cc3eb5c2ac7b4572e5814afbe780cbc3bd89ac1b9d25e0cf01c4455b8ae0c7b286e011e4958d2906dc0de3f98a626001865f84889221e3cb92a
-
SSDEEP
786432:+7NzAOjMmnGVkVjKeJPJgyiTUiLs+eDx07AJxOa5NS4oAqm0T/vOaRdLwd7KFJ:+71AIs0NJ27TLsxDx07UxOa5KAqLTNR7
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Toolify Self Bot (1).zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow