Analysis
-
max time kernel
92s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
19/11/2024, 16:46
General
-
Target
FACUTURAS ISES-AIRE/CON ACEPTACION TACITA/FE9230.zip
-
Size
1.5MB
-
MD5
7fe410e73aa06c1f0a1302c4db92a357
-
SHA1
17b4cc8bf7282a30768493894ec8368cff956fd4
-
SHA256
d93dad53026a2dd37310377661a189ac5326a0fe163b9a88559fbc93c25031f9
-
SHA512
42894e88af1e064c87409d6dd696b08cc6b71e0260a480ff0da9cf115554e569fcccb0e7191dddc5abf67e92f296c39976c698aea168baa331e718289abd13f5
-
SSDEEP
49152:u4ZqWD311On/SeHBkkAD/lBeiWa2h2ndymUdeGLMh:u4ZVD311O/VHBAblbWZ2ndEcGLMh
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\FACUTURAS ISES-AIRE\CON ACEPTACION TACITA\FE9230.zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow