Analysis
-
max time kernel
80s -
max time network
93s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
19/11/2024, 15:17
General
-
Target
Plants vs Zombies Fusion v2.1.4.zip
-
Size
340.5MB
-
MD5
7cabbec60f5d7af2130464ff48530e24
-
SHA1
f04555adbbfa1c37a8f11b21cd719d6925ffac6a
-
SHA256
78ee0b0c5ec29b7cdad8e3335d82ac747fb816a464c36f1c5af5457a7bc92347
-
SHA512
aaec9a8577a8ed07babb89f55e5c3d5cdb45468037e4b8bc958a4902ee5a188a245f913b12719814b60851fac64e84aaa623aed91ac207e9812383f86573fee5
-
SSDEEP
6291456:j4FILj93ZHELbq+5dmBXu7ZUODp6vLQ3tmvQWKqTaIyqhP96IDD3U57p:R3Z4btTmRu7LwLQsIW4Id/6Eon
Score
1/10
Malware Config
Signatures
-
Modifies registry class 2 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 8 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Plants vs Zombies Fusion v2.1.4.zip"1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k SDRSVC1⤵
- Suspicious use of AdjustPrivilegeToken