Analysis
-
max time kernel
18s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
30-11-2024 16:01
General
-
Target
Client-built.rar
-
Size
26KB
-
MD5
1c9ecb075670ce8e744defc369394af7
-
SHA1
7dbf2f41317ec7479017ac636781c68f8ac82ba5
-
SHA256
1cecf453d187614a32e0f2c800523faec7bf7e04ff855f1e16d5ab8ca484839f
-
SHA512
90d8bcf4c495e075e4abf9bbcfe8c3e8213506fdf6cf79d7df990e9a547a54b22eae8cb35aaaf0265d0c64992376976f29b19572a7a79ed79fc5276ca5f79a3e
-
SSDEEP
384:Ltzz5+Fm9mzBDK9OazIpMEsl4v+ZexttksNOsDE1lMo2jeSeSIZSTogaf:Ltz9Em9KDK9Ip62v+gxmsenXSCcogaf
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Client-built.rar"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow