Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
09-12-2024 08:49
General
-
Target
000012ORDER.rar
-
Size
813KB
-
MD5
f2f0bf11acf253dc842fcc8463a56cf9
-
SHA1
8efae9029ae1d71b55fc70c53fb2b68a27bc21b1
-
SHA256
cbd1f2e7db0754a6b66f2fef5dcf0fd85abbbd224bbdc1dd52d90675480c5108
-
SHA512
eeb3a70afa5a13776eaca75a2de097f4e479dc9b3de769d578902564866db3190ae475931aab8bf5e3873ea3cfba04f3be49b1e49a7c64c6d18cd7bb541e4be5
-
SSDEEP
12288:1NAufUClSgvcyf3zIGu3eFkNSgIhq4bx89BKrsjMEFzjXkTPAsuhcZ9:fAEJvDQ3eGNSThq4l89wgbQPApcZ9
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\000012ORDER.rar"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow