Analysis
-
max time kernel
91s -
max time network
94s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
01-01-2025 07:53
General
-
Target
data/flutter_assets/NOTICES.gz
-
Size
89KB
-
MD5
b7e3f4babfb1b106b14bd5bd2dffdc77
-
SHA1
bcdc5de4fceb8a2987fbc18fe303470c6fa04403
-
SHA256
a01437fd32731b065e69f4098fafe525a100a8feff2f115756b678b2097d48a8
-
SHA512
e595c15beeaa45bc98d8cd86c739eb2914ff8d9861e1ba0bf867fd2870245cacdced6a3de41fb2bed49d080f8bd9001c420bcaa6c52c9c3976cd26797391037c
-
SSDEEP
1536:zgJnjdMIFxteoM0QGevZ5HLgTt3QwBYx4W40IhTR5iF1o2OOFIwAd7lgDTd5W/:MxdMIbgoFaR5arOwFPw27K7W/
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\data\flutter_assets\NOTICES.gz"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow