Analysis
-
max time kernel
93s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
14-01-2025 15:06
General
-
Target
Envio de documento OC016 PAGO192025.Pdf-password(2Qo0Qsm6).zip
-
Size
867KB
-
MD5
eaccce8a63a1cdccd71b6efc8091a339
-
SHA1
cc9f3f48979e3ee61f1a7a1e94b25d07fe1ed562
-
SHA256
ddf0e277fe57779b5afcd54250f583e6e3749b13a0afab9f24d761d2969a9eff
-
SHA512
9a848b59ca9d72810c1c5864a77acb7666a3c497c2d8072216abc4b3adb980360ef179fc4ce29b51449ffee30af33146f7fd6340cc71876c10562fb679b745d9
-
SSDEEP
12288:fmY9JB+AAxC6IkynCeuXCWy/eVV2SbqahdwtyOyYBufkQZqTzxX20ICiRznqL:fPr41pIkXraeekqaIXufkQwTB22QrY
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Envio de documento OC016 PAGO192025.Pdf-password(2Qo0Qsm6).zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow