Analysis
-
max time kernel
118s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
25-11-2024 22:06
Static task
static1
Behavioral task
behavioral1
Sample
¡Archivos!AutomáticaConfiguración! paraPc!.rar
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
General
-
Target
¡Archivos!AutomáticaConfiguración! paraPc!.rar
-
Size
113.1MB
-
MD5
25284dcf16e765d81872552a22e9d9e5
-
SHA1
9cf2bc65712f2b95f34739e8157dcf8aee732501
-
SHA256
76f70c669264a65fa2ab3f5dacba4b4ccd9408e731658f9e9f6ac081154de3f6
-
SHA512
a2fb77e7ff87727eae06da273803cc08d358db8dbba7b7262371ab37f2455af9075c72be14dbb85ad10779d4f9212d0ab422c2f1aa8591c52cba40d3d50e1081
-
SSDEEP
3145728:9ypm02nTzoneGu+Jz/2T83G6MbbpMhULICz5c:YpmxzipR3MpHLICz5c
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
7zFM.exepid Process 1604 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes:
7zFM.exedescription pid Process Token: SeRestorePrivilege 1604 7zFM.exe Token: 35 1604 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
7zFM.exepid Process 1604 7zFM.exe