Analysis
-
max time kernel
94s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20-01-2025 09:39
General
-
Target
sample.tar
-
Size
524.5MB
-
MD5
07013d39312b83800b686896a921d4f1
-
SHA1
a04824a183bd32cde97f2f69305269672cf71b81
-
SHA256
2a0c6b887b654557d8fcfbc708d428007053cd9dfdf79385affd90d6d236d765
-
SHA512
b602950d266f664f6cffae73f660994724c2aea0f19cc2d398919c11bc7d5555be6958b251147340fe1d51aac71968595cd90b2ab381aa6b3a7339948bec2003
-
SSDEEP
12288:15O6WhRSUun9+kdKoVddva+UN3IFdSZHjA3tprg9eRcGsMok+y9pHSyKWE:i6Nn9+SKYZcZDAb09bGsMb+y9pH8
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\sample.tar"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow