Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
26-11-2024 12:41
General
-
Target
1AAF1A9F7877DC2C899D910A52F67F31.tar
-
Size
9.0MB
-
MD5
2cd3e15d8f618f931e792b95d263df89
-
SHA1
d35b6ce9a0c6ead507d3a7450c3c58cf6cef87a8
-
SHA256
81c8b6f32d5669cbd7ce434c16c0cb6b5d3a23478fee0db97e0ce7110dcc1d88
-
SHA512
73887b21b91ba845164ccaa0cabf3d0b00670a65be7ccbba3bf0dce4b8d8ee281105466d2145378ec04968a4ff6ce46768f25122ff2f3fd380a75b817c2f1223
-
SSDEEP
98304:oBsfnIxQ4uBKu4IRFHF5ge1EgVtDw6pvf0pttZppppppZppppRlclclJGToGToGM:oBNoBRnNrD2irwCYM5qDvFDt
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\1AAF1A9F7877DC2C899D910A52F67F31.tar"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow