Analysis
-
max time kernel
143s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
06-01-2025 21:46
General
-
Target
lnstalIer_Offiс[email protected]
-
Size
156.9MB
-
MD5
bff5c701c0dc7fa81d0efadec2536fe6
-
SHA1
ab72fea17671d08cfba210139816fc4f83a21b46
-
SHA256
0280259ae16e17c64e9e55c6dc03e13cd09393e410da233b3e895980f60d4098
-
SHA512
7f1a0bc633c56eb557675f4e39bef0781b26fba753968092615defac3c1721ca778d7e41f2ffff28971aa62c2d149fbd8025252f27ba3c2458afd75b3ddab9f7
-
SSDEEP
3145728:ya3cBxra5Pc5HUTg1HTEFSNuFIEZSVu8TnehNDDSnTHLknOuK4CWKApR2I:yaYrg40U1sSNcIE8u8LeTvSnbwaw/yI
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\lnstalIer_Offiс[email protected]"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow