Analysis
-
max time kernel
1561s -
max time network
1561s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
01-11-2024 21:28
General
-
Target
rat.rar
-
Size
398KB
-
MD5
5871259ad5db85af271ed62d44394fc8
-
SHA1
1b554be524479b1b91789ac1784d2a267a85c1a3
-
SHA256
9d5d926d17a3b789407c07ab63c98bd6c37266699ad7efbe6038e99c4b74bdc3
-
SHA512
bc44e0effffae7bcf36db6d54b0e8f7985218fcab2d688215516f940264740ea77148055efc6996bbd9cb3d367ebf6b1b9731601de584fc9bb604e6136142f9b
-
SSDEEP
6144:kGiNH8J06iHkpJ1GxJFk4IYIxB9UE66WSFESkFHu+9FqgpaCMXO7txDwpbDv:TiaJFiEBaJFOXRTtditxueqgpk6CpbDv
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\rat.rar"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow