Analysis
-
max time kernel
111s -
max time network
113s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
19-11-2024 04:25
General
-
Target
RampageHack.rar
-
Size
2.7MB
-
MD5
cf2e517b522da852934bccf832238feb
-
SHA1
fa96d23e91d5e22aaa5cc7ce3e189aa0a8f8ce93
-
SHA256
f5ea57bf6d4e54efe077c73755c877ae274592caafb2f4e8cb9f1e4c8feddca3
-
SHA512
364c2ce6b66f9773b997f630ee943b37b6f83fe88880f4f9b6e80a37489589da37a6045667eb857090f3374a2d9e6ac4ec6bc87b6b5250e952dc2bcee7bc96ee
-
SSDEEP
49152:qWA1BEBDVOoG5xa6xtzu3g/rDXC4hUAwPEFHIw+VCTBixpc0t1hvVyE007lWyy0n:NA1BEBhOKCNu3g3hUAYMHtEIZkn9yM/7
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\RampageHack.rar"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow