Analysis
-
max time kernel
147s -
max time network
149s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
17-01-2025 19:32
General
-
Target
ReleseeBoostrapper.zip
-
Size
1.6MB
-
MD5
ae7a1d5a2dabedb0d05d0476544d7a0a
-
SHA1
b80cce62162d128bfd7eb0c8c7e7d658bdfa9d89
-
SHA256
fedeb03e2b03e5026595fc875b45d3c2c7866f80c82ce965182ca2d363491916
-
SHA512
df28f2b0a88f4623ecef1eff8f5daa2003a37c8b0db434ee33157f9304ca412d863df33999b0a9c1bcc3bb2e48cff066863e8e3f4ff50766cdf675d7cdb7285f
-
SSDEEP
24576:gm+L0mI8KKz0VChigf1iTS6dr4LqKZEV7/D3lTCY8j8oWjwDQL2aKmuUm/y4DZ2V:ny6uikATdzAm/bluYPjwDk2iuVBvQb
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\ReleseeBoostrapper.zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow