Analysis
-
max time kernel
119s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
21-11-2024 12:19
General
-
Target
citra-windows-msvc-20240927-608383e.zip
-
Size
43.9MB
-
MD5
072c6737499a8b0706525f53d10c829d
-
SHA1
d8da7dd32b6b8f37412ae715db765d22074c3c59
-
SHA256
385267a11cc318a791e7a74bf78f673ebbaec9fbec431f2dd796ffbdbb18a350
-
SHA512
13ddf77f69224acfc457a74d6ad42b0d66f8b6f992cd5539241be777dd4e1b9f4217127371312ecc2f00e805cedfbd53109676a5b4aac5a791e1a1d9f8a0ea1a
-
SSDEEP
786432:NQ6UZs+8l5DtQIjXbh8HCwBo99ejE45274VumXUeJWNI92oGgoSt:NQJn20IjXbh85pHoWnJWN02oh/
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\citra-windows-msvc-20240927-608383e.zip"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow