Analysis
-
max time kernel
422s -
max time network
428s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241023-en -
resource tags
-
submitted
01-11-2024 17:11
General
-
Target
TikTok Bot Pro v3.5.6 Full Activated - WwW.Dr-FarFar.CoM.zip
-
Size
52.2MB
-
MD5
3b1e34cf212d8e9540053eeb7cbffbff
-
SHA1
00a1a674575d03e755d0e83b091baf90c064528b
-
SHA256
7c4eb19ef6d2891576f88723e4d0a59f694a9c6a814f0761aa41d7e50473d8a2
-
SHA512
44f1f8a9aaa62eeb4aba032c84121ba6dedd1cbf261b4056b516ec9c65cef928e31a22fc0425494c50c8dc1583fed37ef2d3a1682632a729ed1a9f7974de50c0
-
SSDEEP
1572864:OlAPWnSW4/RcaAfpMcNlibRZn0W7Ovvk3GHc3u8H3pQOWg5:ZPKSW45sScL+n0WIskc3BHvWK
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\TikTok Bot Pro v3.5.6 Full Activated - WwW.Dr-FarFar.CoM.zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow