Resubmissions
28-11-2024 18:27
241128-w3v84swkcw 1028-11-2024 18:14
241128-wvelds1lhj 1028-11-2024 18:03
241128-wm5gva1kaq 1Analysis
-
max time kernel
14s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
28-11-2024 18:27
General
-
Target
70cff7636e0aaaef0cf817cbdb6c1375706e711a.zip.tar.zip
-
Size
12.9MB
-
MD5
ac7dceb4a85cb4250ac1268f8a3d7481
-
SHA1
fdc57ca604746204049368a5d23e6c2893590d42
-
SHA256
38a22130997f3fd2afd7d0773735c729eca349ad93455866ad02543109f4329a
-
SHA512
912cf8aaa594e0838d332fd5d67c1b212887adffcaf765911dda048e23c7e57d4531cb3395cf57f9be6e12c79402863c21af605dfabee854c0dd3e2e435533fd
-
SSDEEP
196608:6Gy8SAdVkkiPx5yAPpl0AOIy/w4n2uMhrM0yEtWoGcUKJvbdS8VylZhBqhcDy:6Gy8LXBIRo6u6rM0LgkUKJzdSLnhkN
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\70cff7636e0aaaef0cf817cbdb6c1375706e711a.zip.tar.zip"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow