Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
25-11-2024 15:13
General
-
Target
File is here/@[email protected]
-
Size
761KB
-
MD5
cbd97bec8477de25e8c78d657f50196f
-
SHA1
2dd7500e88b6cc2f777de3cd5ac9c8c35c92ad4a
-
SHA256
0677918262e25e59c0404e9580dca35846238732d442b683f5c47ba8da5b8884
-
SHA512
a0ec9025a8751d250a67e1ebc60b0048c760d27b0e3f3008ed65cfa264f6da1a364dd05f99d883cbcd704178edab783d0bc648d9e41b49db2680aa7ae32531fc
-
SSDEEP
12288:eloqMjMj1gxdzWY3X9ecyeHwYo2FjUnEuAzFTJqLnScUUHV3rmdM+SsC8DtvhSHS:EoqhiiY3N0cweFjmEuwBoLSbKVwM+vCY
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\File is here\@[email protected]"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow