Resubmissions
01/03/2025, 18:58
250301-xmhhrayp15 1001/03/2025, 18:55
250301-xkqrcaypx7 1026/02/2025, 05:50
250226-gjv2nssrx3 1026/02/2025, 02:02
250226-cggzta1lx4 1025/02/2025, 23:31
250225-3hvkeatpx2 1025/02/2025, 23:21
250225-3b6dbstk17 1025/02/2025, 23:08
250225-24rvzasqv3 10Analysis
-
max time kernel
145s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
02/12/2024, 01:07
General
-
Target
E2-20201118_141759.zip
-
Size
148KB
-
MD5
fa541ef43e1473d845aa50ccaba6aa23
-
SHA1
df7704aec365df548379c91a721d31989d8d4ef1
-
SHA256
948ae9b9e469c0df7478cf8840a78869299e59ffd85b581840b39abc89760001
-
SHA512
2b8b5dda4c387ca02f31b4e7a2f5a5935163ec158b614bf042d6985fa5da1474e6ff23db4e8561a6f573e9d4482cc2de0e5e4da1a49d19108e8f27139690b8f5
-
SSDEEP
3072:PCWcu3nJryPqmiLotuF9e0kYIMeZke4OsqprU2sz7xQL+OqmwjilD:KWcu3JrEqToUFMg1OsqxU22qL+p1MD
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\E2-20201118_141759.zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow