Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
21-11-2024 16:44
General
-
Target
FACTURAS ADVISES-AIRE/CON ACEPTACION TACITA/FE-116.zip
-
Size
655KB
-
MD5
e5d5eb748870fa6cfbf39d9868a7c102
-
SHA1
17f8d1cc31ebab8783b6cb2d68ba815fd1842824
-
SHA256
90a352125569830e789fb0a481bb65204ed85bcf0c098fc88f5fbb654c27d368
-
SHA512
d6ae7cf8455d01c40b09ebab35b344dc01fe1ff54e95617cac9d05ebcfcfb06b276e681982292417e940893a1054965de801dd9403ae2427fca690b53e584f8b
-
SSDEEP
12288:8CvvM4AC8kG53Uh7T5l87y+Y3NiSL+/DSFVAqYRItcDSj7l7Q:8QMCsUhPr87yp5L+eFVAqgItqQ7Q
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\FACTURAS ADVISES-AIRE\CON ACEPTACION TACITA\FE-116.zip"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow