Analysis
-
max time kernel
387s -
max time network
536s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
23-11-2024 20:34
General
-
Target
src trill.rar
-
Size
661.9MB
-
MD5
8b59934e96d224e34558c7979632c51a
-
SHA1
77df0b3233cc977a81a5975c7ded7656de1999b3
-
SHA256
f54602620bffc02f7c00262fe27dd9a0348ff53e395fdea05565f8e346d05df2
-
SHA512
d685b2a9521e82c2f260d6f4cb5878511b77376d6342e6cb6800261f8e70ab713d094f71f9903803babb869846b63a830484a4efe371697273a2cb78454275fc
-
SSDEEP
12582912:NJlQluTK1Dys/VRGrmcP2lUl3gc1FcOP5Gb4EGryMJSlPlsSSFz6SdqQ2/jCbAGq:NzTKYWIPqc1CocAJ5FzpdfWVLLVwdM
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\src trill.rar"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow