Analysis
-
max time kernel
121s -
max time network
130s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
18-12-2024 20:58
General
-
Target
241218-ppqm5szpdn_pw_infected.zip
-
Size
77.3MB
-
MD5
14e2e43d70842864132fab07ad0ff1ca
-
SHA1
77f87c231ea0bad4ba7ebaf95cabfca561ed53e8
-
SHA256
07bee4c09169af71baae203962228143502b474937517b6ebd802da3f78ede76
-
SHA512
64fb908236c88376f79c6eca923258fc62c0ee2528efc9d55f147ea8722db7f79d48d49255ede55b51dad58f14524636a7e2621deaea2246edf15370d898b3ab
-
SSDEEP
1572864:pZezCytCUNlOoBDaHDZIgo73/vSshJYASx6i3cnzUpMg:pZqMUa4ed/o7Pv9h+ASxJVCg
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\241218-ppqm5szpdn_pw_infected.zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow