Analysis
-
max time kernel
439s -
max time network
441s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
05-01-2025 10:01
General
-
Target
RElease-x64.zip
-
Size
19.6MB
-
MD5
5cfd1f682e5ee044d1fd259fa02398ed
-
SHA1
9887d8c670882c77b5f80791035d485a4b0ac30b
-
SHA256
348262f755d1ca868647e57fef8a8bcb1b409134f3e275c444de6d3edb9c98cb
-
SHA512
0d296261db1a0b7f62d30ae5a09ab4533607ef70d35a389df8b1e12ec103978e0ef19c434db08c0119d080521ca54b32c138b372a681a1e246f3bcb02368a167
-
SSDEEP
393216:ppIutnYNJcYw96nsFrm02qEszOVhDS+oBkxXLTsnnL3Tg38zwSPzTFe7XYk:ppbRYbps1mkEsOVZeBILTsnnTTg3izTc
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\RElease-x64.zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow