Analysis
-
max time kernel
30s -
max time network
30s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
29-12-2024 23:30
General
-
Target
yyy.zip
-
Size
2.6MB
-
MD5
2c83c4570b4773898a574e4143d11241
-
SHA1
cd8632e7edace07cddab7d0b2babecf12e58a102
-
SHA256
e0ff12dd4dbad622cf4596ef3c00296e99d47aa8e038d32209323887fba730da
-
SHA512
75ddf226a14515d61a66e9c6c5e5535b0ea6f5c7510d5f8140b7df7dab5befa2ce2aab240bc6e3663189df8d22d860590950a4e39c1d2069294c0b15ea695bf7
-
SSDEEP
49152:ZZQdM9sL3HYZucbQlRsXwlKsaFnTT7Ejujwk/wGZ1f0ZjkJGwuPVuJREAED4T42u:TQdMeoocbQQXwlSTQju0k/wGvYk8wrRW
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\yyy.zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow