Resubmissions
01/03/2025, 18:58
250301-xmhhrayp15 1001/03/2025, 18:55
250301-xkqrcaypx7 1026/02/2025, 05:50
250226-gjv2nssrx3 1026/02/2025, 02:02
250226-cggzta1lx4 1025/02/2025, 23:31
250225-3hvkeatpx2 1025/02/2025, 23:21
250225-3b6dbstk17 1025/02/2025, 23:08
250225-24rvzasqv3 10Analysis
-
max time kernel
147s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
02/12/2024, 01:07
General
-
Target
___ _ _____ __ ___/전산 및 비전산자료 보존 요청서.gz
-
Size
575KB
-
MD5
7fb27e920c0d272d03a1b1258b81ede8
-
SHA1
6273137ac4b396ff99b6d227e5207273b2d19fab
-
SHA256
04eb8b5e59d657f4c00573d1d49c24932e10ad503be1a802d24c86463319764e
-
SHA512
9924847acdf1188ab14060bad5771e01d88cff233bcf81fe83d1b795a68d4eb42316fe35c0ece66160a160669cd23ea072c0f6c50626db991d4484a45ce8cf90
-
SSDEEP
12288:+HpIr3xwSfqKtsHsNFO9ZdX/WAYqDwrmjJwX3bdiuaRCu:jnfHyZdX/WAYQ4mjJwXVaRCu
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\___ _ _____ __ ___\전산 및 비전산자료 보존 요청서.gz"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow