Resubmissions
22-01-2025 06:59
250122-hr77mstphv 813-01-2025 11:48
250113-nyfc4a1khx 723-12-2024 21:41
241223-1jv68asmbl 1Analysis
-
max time kernel
93s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
13-01-2025 11:48
General
-
Target
Електронний платіжний документ_384783/Електронний платі�.rar
-
Size
106KB
-
MD5
6a7a421b9cb4d94f9e45508d2b97f50d
-
SHA1
73f0b4aae8c22cf1b4b06fcf187c00df72f5856c
-
SHA256
dd58a12e80fa9914419db7eb5a571bc3ebcdaacad17505d03369531d5b33ecdf
-
SHA512
45e04f5aadd84012a3bb133088408a39cc736c4653528e0783c38002a413e0349850f50862b792dc6cbe0f561e7bfe5802343dbc6d52ff43643e38c9987940bf
-
SSDEEP
3072:o1egkeFkCg78J+YCSii28tODZUB/mNAT4IGhrpy:fgBkCg7vpmOK/1T4IGW
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Електронний платіжний документ_384783\Електронний платі�.rar"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow