Analysis
-
max time kernel
93s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
19/11/2024, 16:46
General
-
Target
FACUTURAS ISES-AIRE/CON ACEPTACION TACITA/FE8854.zip
-
Size
1.5MB
-
MD5
d203d341e74ecd161a3cd6b8e1b3fb78
-
SHA1
3d4290375ff6be1716ec06eae164d0cedc401b54
-
SHA256
52cfeb8de38f7e3b6149f577a422fccd2ac0dec45a5507c066805a16700bd7f4
-
SHA512
360eeb4b14f82f3a33ccdfb00927f82f190aaeebc949f96e7ca5224e213d5e617e7855227ec805e340844da3e19e59591811fde9aad658e286ea458dfe1fe73c
-
SSDEEP
49152:5LFkXU/G2BL3zOt/uknshK24ka729f0I1P:5pKwlF3zOhfsB4V29f0kP
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
-
Suspicious use of FindShellTrayWindow 3 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\FACUTURAS ISES-AIRE\CON ACEPTACION TACITA\FE8854.zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow