Resubmissions
17-11-2024 01:12
241117-bk12esxhnp 317-11-2024 01:12
241117-bkpy6axhmq 317-11-2024 01:09
241117-bhytaaxjhw 3Analysis
-
max time kernel
92s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
17-11-2024 01:09
General
-
Target
Nitro-Generator-main.zip
-
Size
16KB
-
MD5
644f2032041dce1fb10a2cfd7521018a
-
SHA1
e187565156d3a1874e40c294bcce33e2a5a93daf
-
SHA256
7e9c81789e1ea9d8f034ebb76c2fb57852c162145220db9bcce2522b6f8c9551
-
SHA512
30670f6facbb96f6e30325e2d8f0351d0611018302938051e4c9c5a335263f231a0d3d5f014477e00c75d400bf0ebcfb359117ec04128219e364af5b9e825762
-
SSDEEP
384:KVbCEh/70cpShMoU8bbL92+hVCMF85hW8IcwY25bHWrYOJ:aCER7pNX8nL9XhVCMFEWncwN5bHWrtJ
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Nitro-Generator-main.zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow