Analysis
-
max time kernel
435s -
max time network
439s -
platform
windows11-21h2_x64 -
resource
win11-20241023-en -
resource tags
-
submitted
04-12-2024 01:12
General
-
Target
Yashma-Ransomware-main.zip
-
Size
155KB
-
MD5
e8403a7184c407130f2a1cd05c32919c
-
SHA1
0be3aeca29120efadbc37c4e9ce074fd530c06e5
-
SHA256
4cea74d80b0fed024d554aec6391dd7a4cc41abc44584b7b4617785d4842a1b0
-
SHA512
0f6b96ecc2318df177b9a4335f718261a48cf577574cb80b217ba2dff300b5a61da75f40264f4f95f4432c0eda8da5e0cdb68c2c22bbf7eaede58af923bd8776
-
SSDEEP
3072:IfUjZjB+4cQl18ClRkpf8b4yZWox0fbYgJVlSlcDZwngAgBVKu76LIw2/RbLpwLe:IKjBx1exoGbYOFBW+xLpaC7D8YRseByO
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Yashma-Ransomware-main.zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow