Resubmissions
08-01-2025 01:36
250108-b1czjazpek 1008-01-2025 01:34
250108-by5lrsyjav 1008-01-2025 01:12
250108-bkp9xszjbq 10Analysis
-
max time kernel
94s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
08-01-2025 01:34
General
-
Target
boost tool_latest_version.zip
-
Size
11.6MB
-
MD5
ac19e920d27ef1542861668f24e9e177
-
SHA1
1462dc9e82daae9a381357e71012423dacb14009
-
SHA256
5124045daee47ac816c8f60b272470558186235eb37e42e999677cfac1e24f57
-
SHA512
b4f1e8ee8a1d3e810a159b01ae04cc583ad0803b6f9c8b4168cae9214f4d8de891aff1331a62fa9991a1bc2d85c230f9d0bc9b9be32d5d93d65202487946d695
-
SSDEEP
196608:cwp9yBBrOTZeAYJDVmeRXEhruogeRKsjSszyKQuqEDBZMNtfTtiR8rtr71j:cwpgeTS4eR0NKUSszeuqE9eNtfT8G5R
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\boost tool_latest_version.zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow