Analysis
-
max time kernel
5s -
max time network
14s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241023-en -
resource tags
-
submitted
24-10-2024 19:47
General
-
Target
RNSM00442.7z
-
Size
88.1MB
-
MD5
4b38c460395d00fabeefa4f8ed666f42
-
SHA1
267f3cec8cb2d370e66b2e38a20e795dd3ac136b
-
SHA256
637818d66515e2c06402e23fe770314f0776dfa9816c321722d01d36c84eb63e
-
SHA512
d0e9d0925abfb8a58416ae0764bbce1e0f1cd272e726b7b2bec1db72274a5e9df664e86cb895415c10437c7269831ec7dfe75274b0026431b898d09244dc31c2
-
SSDEEP
1572864:hodAPPOiNbJytutfKZ6sl/r+iFESVxyFhUCYZxSGzlnrleOjLQ5w0N5L0RA4vz:hTWiNbJA4PAr+i4AfSGxBeOjL8L0Tz
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\RNSM00442.7z"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow