Analysis
-
max time kernel
124s -
max time network
141s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241211-en -
resource tags
-
submitted
20-12-2024 13:39
General
-
Target
platform-tools/api/annotations.zip
-
Size
137KB
-
MD5
767207f7e9ace1ce2404cf79b0c517b4
-
SHA1
54e400ef13cf260c26e3d5321a602fdac852fbc1
-
SHA256
0f1ed8e39779276acaab4034c0d7df58edb8b9d6b54f5c2417bdbb15cc13834a
-
SHA512
28d95dcfc4d9d6dfaf4ff741663137ed06145520099da561948a3cb189f6ef8d3be47b8a8017a6288826e8430c63a14d6715d48da65d48b51f6d85e0350a293a
-
SSDEEP
3072:VFT0UTRAIMowVWVm0/iQC+9G5DGDqqJNgtJvnfa8DeM8fH2t+B:T0UlAIMpW7KQC+AhydNgtJa8DR8ff
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\platform-tools\api\annotations.zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --string-annotations=is-enterprise-managed=no --field-trial-handle=4124,i,4538255413480930743,12957764444767653848,262144 --variations-seed-version --mojo-platform-channel-handle=3988 /prefetch:81⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --string-annotations=is-enterprise-managed=no --field-trial-handle=3932,i,4538255413480930743,12957764444767653848,262144 --variations-seed-version --mojo-platform-channel-handle=3152 /prefetch:81⤵