Analysis
-
max time kernel
312s -
max time network
318s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
23-10-2024 15:41
General
-
Target
Installation Guide/DefenderRemover.zip
-
Size
505KB
-
MD5
b021f7c45fe950f48b4768d3e1182a2d
-
SHA1
5a8adbbc093e85bb1128629ea36a168e7e460da1
-
SHA256
af20364d2e09cde933412c059f5295d296dd189507294ebe786a69d6eb3cafe6
-
SHA512
01f04b4671259a897ab3b446265e882f3780b3177410f16bf3a404231205bb5f9f1883efabebafd57f4d974908a4faafa5bde7fb10eb8fdcd3008fde748b39a4
-
SSDEEP
12288:n7SDe/kYAhSoTHD9Xa9lovLoS/x790K9KoybuHq6f6diYgyd:n7SqAhS4KQoS/PVQ4Hedixyd
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Installation Guide\DefenderRemover.zip"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow