Analysis
-
max time kernel
92s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
15/11/2024, 10:26
General
-
Target
RNSM00310.7z
-
Size
7.1MB
-
MD5
c4343de80cf5b87860583ce70b74366b
-
SHA1
26c27c01db7260325fb02d5f1247d1ac8e200e45
-
SHA256
a30d59af60ec2211948064f267544b37edddad284ce86c64120fb6ae545285cf
-
SHA512
9564f0820f845a3ff578f362ae50909b4f87ea0c141b65c95727068361b29f851c4a218b2eb477df19d9d8d998dc44c2756e243d206ddc5490074986a563f9b0
-
SSDEEP
98304:uxi0fsp+sGzfyfoEdRKcAhCwN2HiN8/2dmAk1NSkGCFYLwKNtjNWemY/Go0TZLl9:uTf4KBhCLuqMmAkBkNMv/oKd9z5
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\RNSM00310.7z"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow