Analysis
-
max time kernel
12s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
14-11-2024 18:23
General
-
Target
GrowCastleAutobot-main.zip
-
Size
39.0MB
-
MD5
f71c3ffd761af0ce39c4cc6fe3db5019
-
SHA1
4f2b338b9fc358684d7577698ea2d57dc2cad477
-
SHA256
13483dc0f61d29683c45092618e98775462e5f68805de9931a5802b05ddda5fc
-
SHA512
f663479ac14b83b5f6b97067a76f55de3718407102fa63f622991ad4bdb124862ade4e29acd02b4c374a7a48cd1b0fe506c37fb1ec808e75ccd8c38d3ff9994a
-
SSDEEP
786432:iXlErsmjHUOy2xYTSLSHdIQummcJpt5UFv17dHigw76uLxYUgNuMR:iVXjOy2xSOJQvLb5anCgw76ixYbFR
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\GrowCastleAutobot-main.zip"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow