Analysis
-
max time kernel
62s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
19/11/2024, 16:46
General
-
Target
FACUTURAS ISES-AIRE/CON ACEPTACION TACITA/FE8853.zip
-
Size
2.9MB
-
MD5
880aa470c20ad15fd401543546cf3ef2
-
SHA1
61ee373119f421a51f2abb0d91abd457122713aa
-
SHA256
5d595ed047ad67451b5821fbad215117d7665a1da83b77d5a0fe1e136d9f6a34
-
SHA512
56c414dc8f9840f6b7f53ac65498826d575964967ccb2001dabac0852cbe8f8e12789340a26b4b60390440073016e06edc1e4380269ab804da231cdf481be72d
-
SSDEEP
49152:GH2BL3zOt/uknshK24ka729f0I172BL3zOt/uknshK24ka729f0I1+l:5F3zOhfsB4V29f0kaF3zOhfsB4V29f0x
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\FACUTURAS ISES-AIRE\CON ACEPTACION TACITA\FE8853.zip"1⤵
- Drops file in Windows directory
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow