Analysis
-
max time kernel
436s -
max time network
1156s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
28-11-2024 09:35
General
-
Target
VanishRaider-4.zip
-
Size
18.9MB
-
MD5
6cb700383e1d7fd73c5afe5920883f72
-
SHA1
0f606129bdaaeaa1135b5c57179f950cfcf474da
-
SHA256
35629267bacb38c741e6cc493de323611af8ec626f94edd0d27c2a760f50141b
-
SHA512
e40ed1c05a2ecd8f3f300e9d866fa22ff29f0147bf649713f08ccfc68b600207ddca7e0526271492408280d0bce23390056c1bc8c245db9bdd6d730225d75d00
-
SSDEEP
393216:SruR7kx5sLCcRZKBBUULR+EEnXNnC0yg4VZhtJfhorfUadeKp:S2Ax5VcRZKzUULR+XnZC0RUNOfjVp
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\VanishRaider-4.zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow