Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
26-12-2024 11:12
General
-
Target
Dotc67890990.pdf.zip
-
Size
591KB
-
MD5
a9c7d7fc88289f358f93af9a246588c0
-
SHA1
858867aefecbcae36cdba0b83fc6488684d5b28f
-
SHA256
06c909630395420f8faf0e3560241c413603a2539d34683b2d5d73d72428d53e
-
SHA512
f219b27f7cfac9f0553f5eb094cc3a120a513e5aff3b9730b37a42faaa9b3671b2c02ceb2b8f183db0a869e0f9d227fc4f85628000612a082eab2d3693b99d0e
-
SSDEEP
12288:cnMn/KcZynYJYrRbbqyBZdAMy7BNuVUEWE5o8wUUFXma8HVhx6pShqhUWqBQn:czFYJ+RHZBbAMy7uCE7kUgaWqBQn
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Dotc67890990.pdf.zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow