Analysis
-
max time kernel
92s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
19-12-2024 07:13
General
-
Target
non prem.zip
-
Size
24.1MB
-
MD5
fab4413d6c35391de67fbb890772cf70
-
SHA1
9b76cf00f5520e695c0a51e920c3f88b7c6ee9ae
-
SHA256
a87bae75302b2021b1f61d0f95a0b2d69d6744ac7a25b83ad8b4b94da65e1806
-
SHA512
d8f9b92bb2ddbe183d9720a56b11655a14c1197e2d935cb0f048ab1b4961ad61387a4b2a5875a41e22db82417d52a7e8d4b85bac2f47125373d878a530a114d8
-
SSDEEP
393216:1qPnLFXlrN7mH1y2DOxQDyRCDOETgs77cGwJMVgGNCFpWpLMUjfBoGteBlsS:sPLFXNRmH1y2OQDyFE7GJ+PcGSUmo9S
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\non prem.zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow