Analysis
-
max time kernel
148s -
max time network
161s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
19/11/2024, 16:46
General
-
Target
FACUTURAS ISES-AIRE/CON ACEPTACION TACITA/FE8916.zip
-
Size
1.5MB
-
MD5
d76b6256db1030979b8f89a33ca22949
-
SHA1
60769ec00e59b9fa947e64a56cf205e8f639938b
-
SHA256
c6270da5eeeb9d3608b58df818f501245951480113c1e5093c840087abc23f89
-
SHA512
dab67c7068170543abe3e0d67ead2cb1032dc5f24441104bb8ee681d5f7cc6891489bf9be5db3c2cfc2f918314f4a789d7cc041df2166c7db6564e4a910ed946
-
SSDEEP
49152:TxQsx3jPOTb2jkEnqD/VdcWA4M32FnOxmu+H8:Txhx3jPOPIqbVNAj2FnOJ+H8
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\FACUTURAS ISES-AIRE\CON ACEPTACION TACITA\FE8916.zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow