Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
13-12-2024 16:37
General
-
Target
TeddyPcFiles.rar
-
Size
15.0MB
-
MD5
fbe70824eab9c5a596384ffeca5858b9
-
SHA1
7da37b0839d96c8442e2680ca197eee357c65de6
-
SHA256
6fa8356f35968afc15ecb036d17e197dfc310fcd5a42fa952183bd4b5a37fc36
-
SHA512
c11fd2c598199370d61989ab8b21ac6fa8c067ae15bfc2f98bdb0915ae6d43df80ac511169f5abb7d5a384a6527cdac060cd034773df2723791f7a1ee5b00ef5
-
SSDEEP
196608:NvsTyJvgyfFvTi5PrYeaDTgT/QSpMDJuMQg6u/LrBD+KbOInvx8T7vA9BhKM8n:knGcEea3+/ZpCJAYDfOAu7qTKh
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\TeddyPcFiles.rar"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵