Resubmissions
09-12-2024 12:05
241209-n9axra1paj 1009-12-2024 12:02
241209-n7ne3a1nen 409-12-2024 12:01
241209-n7c94a1nek 309-12-2024 12:01
241209-n6t68a1ncr 10Analysis
-
max time kernel
3s -
max time network
1s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
09-12-2024 12:01
General
-
Target
241209-n5y4sa1nar_pw_infected.zip
-
Size
23KB
-
MD5
341e29f1e0cc1d9fbfd3c7fc53d41c48
-
SHA1
b21f1f27b41f686285a21e84cc731eb02ec6fc47
-
SHA256
4ce9095a92d1112eed2fdf1ffaf6d9c007224203037dd0b8a3a20e7fcb10f015
-
SHA512
d5d6bea413dc9d9aba5001c6f3bb6854e831faa2719c7e2076319a7802efbde1e51909408e138788fed7b409fad2979f7c6ad8f4c07ce4cfea25e92ba2ffde2f
-
SSDEEP
384:YBh3pkxBVIvRFHqvf4UOeg8Vbt8s7eD7XB1vD2IeDEnpEtzCfPSyOUxaAjxxUvcb:YB0baSH4UVg8xtr7ePRV2IQ++tz+PqKh
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\241209-n5y4sa1nar_pw_infected.zip"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow