Analysis
-
max time kernel
92s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
19/11/2024, 16:46
General
-
Target
FACUTURAS ISES-AIRE/CON ACEPTACION TACITA/FE8856.zip
-
Size
1.5MB
-
MD5
8ea1d872f44393b0db2d47803cdcebdf
-
SHA1
bc89a5e75fe949d9395b729d05ec4c18849fd862
-
SHA256
324ddd24e667be4af65f8c2941687bc06fdc7a00201d1e8526953b81792678a4
-
SHA512
d1f81a84311f299b31dc9b3bc691e4a600fe02497fa7173af9e648f5e11cdaa276672fda67de4bf9ee7a2ce0b24b9c2a5192be9f931887808777c7c0609d670f
-
SSDEEP
24576:YL2UOujHCBzrz3ugOtVtvm1GjR5xhrdUTFLtg2fgkajP29H/cj9RksI1cPt4U:u2BL3zOt/uknshK24ka729f0I1W4U
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
-
Suspicious use of FindShellTrayWindow 3 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\FACUTURAS ISES-AIRE\CON ACEPTACION TACITA\FE8856.zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow