Analysis
-
max time kernel
120s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
20-01-2025 09:39
General
-
Target
Payment Confirmation.gz
-
Size
1.2MB
-
MD5
d7ad5711692f07aba871c91b168e908f
-
SHA1
12de4c53041bb3ddb233e27a66b797fb10a57b86
-
SHA256
6d6b9932fc109ad5e7cbb53ac022cf987b46674c6a635cee9821862cf777e8bc
-
SHA512
58c7298e52684f94c047d98bf865d79953a155c42395f593d886e1c23e15c12ea62ece8c28b4c235d508b19d26bd09e026b156115adf3ceb093ce757bbfff867
-
SSDEEP
12288:CBHBHL32sV3bJbKxCDmFBdva6Ux3ILBwZtrA3ZRrm9svcGg3QuseCW:2JLms1FbKxhFZuZhAfC9RGljW
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Payment Confirmation.gz"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow