Analysis
-
max time kernel
89s -
max time network
96s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
24-11-2024 01:31
General
-
Target
Visual Services Spoofer.rar
-
Size
45.3MB
-
MD5
bdf59ed18ba5cfe787ab94fdf50058b0
-
SHA1
ca5d92b6d6b5fc64c7a87997f7dbf004caa02266
-
SHA256
1a30aa1a7d5562799615d29430357d6bc8708d3ad1d0408ee09fbf3ce29846bd
-
SHA512
e89cd12011196049af2bfd535f7977065c3877d2de8ac9523be51aa93d60b8a85ee1c548def14a700ef7a6afcfaa4ae5b6e15af94ed96c5c4047c4eb708a43ac
-
SSDEEP
786432:Stsz65DqrK2OJMNetV5Ho5M71ngDvFpKVAz3HkO2HO30nQSgbkoGeeFmCIzGlGZ9:Sts2tEsMNetVBoq8pKCjHkO2Hy0nqWs9
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Visual Services Spoofer.rar"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow