Analysis
-
max time kernel
139s -
max time network
204s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
23-10-2024 20:48
General
-
Target
RNSM00444.7z
-
Size
60.2MB
-
MD5
8d5f6c6746238d28a1073cbb4f020a74
-
SHA1
bdedfc8f61016e3fa3201ce0f501c42324c0786f
-
SHA256
84746e0b57050f68a3aa093b75731cf3aa321fb41534d55392525b105d164a54
-
SHA512
c1a359269836364730cc84a4a90bf2a1e9fd4933f7d1cb48194a8d1c99c15429e86a177f0ff4ea33a025e8583f108f4b01ea52d7341918ab339bf29a7d8ec256
-
SSDEEP
1572864:KzWRBEEP/N7M4wNhmpqdsALScA/CWHemATVzltiXGp9FMyf1+Y0ab:Rnb/N5qm1ALMHemalPL0ab
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\RNSM00444.7z"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow