Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
09-12-2024 17:14
General
-
Target
source_prepared.exe.zip
-
Size
75.4MB
-
MD5
4fcd53614aa6627d8b076239c7a7fe2a
-
SHA1
095e4e21e5fc181220ef0175684169608a2491b1
-
SHA256
a9cb15dca3cc2222e45e31f33fd5f668a5d89473d235ca2c0a2b37c21079552d
-
SHA512
95c55b241fdf7b19ea9766adbd0dd1f27edad9f449e42b7ec0f8969614d658a918faf3bc6583b76b0e849dfc15afb6f3d4e60818a3f0053141ce9d36606b6fb4
-
SSDEEP
1572864:8uKrLtDcq2WKu8wnodZaz97QDiM5rIqFUk+UUwJHvAAtnjPZgX9JQ+xD:8ZVgq2WKubojqUDoqakiwJLjPaXsED
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\source_prepared.exe.zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow