Analysis
-
max time kernel
95s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
11-11-2024 01:37
General
-
Target
book 0.zip
-
Size
28KB
-
MD5
38605a41eda691b378c8304bf914c777
-
SHA1
75f2667ccacce7c7947c186dca5029ffee720c01
-
SHA256
f791bea6d653eddcaf8be57e45b698e75f105e28a20c50f519ad43a2b2e27b2a
-
SHA512
d1876ebad38543260b3c4a2b83b69546da52b093f459890835ad02ea65ea712e91f40c5bf9ae0313fa2f4fec303cea2348c5272a4ac70088d1dbffb7d5163374
-
SSDEEP
768:os5/i8xs5/i8As5/i83s5/i8qs5/i89s5/i8Ms5/i8zs5/i8Cs5/i8ps5/i8hs5S:ouDu2uNucuHu6uBuUu7uTuGuduguXuKz
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\book 0.zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow