Analysis
-
max time kernel
92s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
09-12-2024 11:08
General
-
Target
SigmaBase.rar
-
Size
5.1MB
-
MD5
d0c067fb8571dc6b3fb712b587a9f815
-
SHA1
4e8b3dc0eecf3742d6ab2b7bbbd1bb62fb969e1d
-
SHA256
13cc2f2806d65c35f10a500e8e109c48c1b4ab12642ebdd5c0b3ae85c28fed53
-
SHA512
71228c7cab4c8e143d4f570aa237fb8a17b130044c1bf1100f0f4fdb0aee52ab41064a8a913e45fc1a56d608d0ff89c1da3680508d49b789f50ace07c109189a
-
SSDEEP
98304:yW0Jih/Oj2tvKBV3TGU28aPlqdFsmGhEdntT+w+rSK/5anNREjNYEN8:yW//Xe3xOPlqdXXdtT+rTwEpYl
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\SigmaBase.rar"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow