Analysis
- max time kernel
97s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
20/01/2025, 14:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Documenti di spedizione.rar
Resource
win7-20240903-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Documenti di spedizione.rar
Resource
win10v2004-20241007-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
Documenti di spedizione.exe
Resource
win7-20240903-en
6 signatures
150 seconds
General
- Target Documenti di spedizione.rar
- Size 531KB
- Sample250120-rbxweaspcn
- SHA256 8a81c3cc487383e9f4373e5a89a0ea1a8f376dab654d5f476590a3991a832be1
- MD5 7314ec0fcc64f0c516e503599587604d
- SHA1 515ef69cd9d0b15c6eb057893d9446c320dadaca
- SHA512 637fcf2af10f1eadf0c50c59dc1d7b4b26eb44311acf0f343df2dc3888ff6f24d02fd4ab55b13151f31f7f81f9e55405ad5f4bd4f2ef634fa6c97bd2617a25dd
- SSDEEP 12288:qJfA80L8oMzeTbJsZW4vQgw2bHT3bL35hbWraBdDdLb8G:oIXIoGalkYg73bL3ZPJ38G
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4316 7zFM.exe Token: 35 4316 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4316 7zFM.exe