Analysis
-
max time kernel
87s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
11-11-2024 09:35
General
-
Target
sapphire_vegas_pro_159753.rar
-
Size
381.0MB
-
MD5
4bca4a8701135905f8e74291c7a01048
-
SHA1
fa428d2827cc17d488ea94f65b1bb314d1b2cc0e
-
SHA256
0ef3b7e7f6dc377f3f8dedb00b6263a194af8d316c391d18d3393611a9bcef9e
-
SHA512
04918900ca146afb02047d9354c77ace50a50452ca66bfa5d4a50afced4e9305e38c0d3b884677d30a1c60825c8a9dca158465b7c277f9dc9021df5c055756a4
-
SSDEEP
6291456:0wRUo9Bh8WwCdJFdxjQnOGiSGZLNcVasKTIJRplqsUHOd46g8eIp85uDtJEe+/lp:X9BbwC3FonDANcVasKKRplbUH86TW8MW
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\sapphire_vegas_pro_159753.rar"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵