Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
10-12-2024 20:08
General
-
Target
Encoder Builder v2.4 (pass DIMA-XP).rar
-
Size
1.2MB
-
MD5
c19584765504783624918d1459cd6499
-
SHA1
3c87b34cf3b9243f574d490fcd4031dd9edf68e8
-
SHA256
b5cd4b8c5c616fab5924452155581bc94e0fe0d67cf8286e300be3d985ca5ef6
-
SHA512
b9869c78359720d2aded618a0a01d3091f2cc38087af7c2e1aad07917a7053c9e25c21cd498af7b72d53ffd362d9cba09aac451d6d765316a8cbb4356b77c155
-
SSDEEP
24576:ZIJujiWNRlr17yDmy67P3jbDMFhVnbk3KNADaIPRn5tJKzjU978F6+:BRlrRxymPgFrNANN5Tuj5Z
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Encoder Builder v2.4 (pass DIMA-XP).rar"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow