Analysis
-
max time kernel
240s -
max time network
244s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
18-01-2025 16:00
General
-
Target
ng-32948238493-18-1-25.zip
-
Size
1.3MB
-
MD5
8ef10cb39cf040535382e7fbe0cbd17c
-
SHA1
4beccbef5a235de2c6305946c2200f768fa81ca6
-
SHA256
5f01f121168983ab53d3e4e523e344e3a78abdc3ca66cc2be0b54c8f755d8fbb
-
SHA512
84169105a3af1bb44735bd3ba25de2e9704593f626d439e1f978a1b12eeb17faffe4fa89dd02778406101d6193932a0d6304e895340f8a0ae06104474590d843
-
SSDEEP
24576:y7ON2caVsuah8AI+ui5FXBz63nAbSunVPMqzlfud+xJeBW/ikBRrDi2AeH5XW:y7OkcaVJjAI+JPz4AbSux1ZJMW5BNeeI
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\ng-32948238493-18-1-25.zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow