Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
31/12/2024, 02:58
General
-
Target
Release-x86.zip
-
Size
22.8MB
-
MD5
b702a938e2a59d94589f56643c6bcb97
-
SHA1
19948646f03568dff602218f966fa35591b11fbd
-
SHA256
6e9c872917def263d5e097fe5b2110c76ad72f5d6e87326a4d74ddcdb743ee36
-
SHA512
30500ccfec193a6ee9318cb67cee0e5e169c12dccd3f5d7df9983a2088a9317660fa8a9383df39d1e0b2a49db975fe915daa549459bc1ab98cad7eb8eb7b6b38
-
SSDEEP
393216:tDUC27fkAw2eSfr+zWRY/OGAD3XvrZXtX0ptC7Ye80AT4uCVucOEkAQa1dUI:tDZ27s729GhALv/kptC7YkAk5VuXEkA/
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Release-x86.zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow