Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
02-12-2024 21:10
General
-
Target
snap.78N1BA9-1.200421.144153.tar
-
Size
188.3MB
-
MD5
bf1b5fb1b74038fe40df63447bc295e4
-
SHA1
328e010d5297190799c8da9d96beeb71984f6498
-
SHA256
b575cc4e3ad799fa263f555b314195b3980405e56f81a8de04e7fb0748586cdf
-
SHA512
c899cbf5f800a7b63416af904c73e9246f32e488e3fc236a3a8f9500b6168842f53fa5d71f36fc5febe8e28aecf9859d772afa8d847dc6842be7ee8ff14ad16a
-
SSDEEP
49152:7NBqsO0PP6hzowhxNR2UK6LnQG5FrjXBvN/FCrSffGKBUMHE84L5csTOVd8Z64f0:sovu
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\snap.78N1BA9-1.200421.144153.tar"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow