Resubmissions

19/11/2024, 16:46

241119-vabhkaygrk 6

19/11/2024, 16:43

241119-t8gxkatjhj 6

Analysis

  • max time kernel
    92s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/11/2024, 16:46

General

  • Target

    FACUTURAS ISES-AIRE/CON ACEPTACION TACITA/FE8855.zip

  • Size

    1.5MB

  • MD5

    a4a7d04f1e0303736b2d4b6d9198be5e

  • SHA1

    94ddc54d450b1c6e751eaa91fac6cf24ca7401d4

  • SHA256

    e33431d8d3ff77811cb17b4ccc9630da65fea647b3540364b0b01a16bc1f1da0

  • SHA512

    7292fa3833ad8942f51d500e4a51df4c028822332e96e622956093f7704c78507e183bb73ef515bfa8f7921f648a1960de756694cbb9ccd268e45d4ef720c4a3

  • SSDEEP

    24576:f68OujHCBzrz3ugOtVtvm1GjR5xhrdUTFLtg2fgkajP29H/cj9RksI1cPpRdp2mq:fD2BL3zOt/uknshK24ka729f0I1YdpA

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 3 IoCs
  • Suspicious use of FindShellTrayWindow 3 IoCs

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\FACUTURAS ISES-AIRE\CON ACEPTACION TACITA\FE8855.zip"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:4188

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads