Analysis
-
max time kernel
117s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
19-01-2025 17:46
General
-
Target
SheetRat.tar
-
Size
102.6MB
-
MD5
94aafa0ee17be68beaecaae97228234d
-
SHA1
d45788aae967ca91a54fdf1f7d7503e318e1553f
-
SHA256
1c178d1f4290d4abc830797b690a00c038b4132ea1493ebbaf7bce85da7fc9d8
-
SHA512
ffd6108264f611480d551cc87bbc927897f5bc52d2628d3ca7064a4daf2a35ba3544f4a21c658d1781948d57d4bece39f7e0b6522630b2b3df64e69022d82a33
-
SSDEEP
1572864:/GvbzPJt+gDl2YY4vu0Wmkt9YpG3fLh5cXBgAUJBBmT8LySqAxKQ:/cmskt9YpG3fLh5cxgAUJBBmT8m8KQ
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\SheetRat.tar"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow