Analysis
-
max time kernel
92s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21-01-2025 18:57
General
-
Target
Oneclick-main.zip
-
Size
1.7MB
-
MD5
b5284dfa8dda5391cb11c1d428ee403a
-
SHA1
b6a89f9718ae3a894aaf03ffefbfc9c57af721aa
-
SHA256
6740d0ca97c88527b23da8c7f6e03066f9c529d0a2e8ff88ddbfed5f0fd34b27
-
SHA512
c86c92ccad1f112fb0dee768e529bc7a92326574c70626641d4eb2b29cc7b5108407cb728ce62f0b5975b47fbc03e36799ec89780460db76f5424db7ad44d7ff
-
SSDEEP
24576:hFuTk2CVpuhzK+paNNH2lTnEBvq/JXT/G7agj0HRm7FGYgyKZdyxBh5hOY3i/TwN:hF72Wd+TEZwpi26IRu6yKnyxBFOV/T3C
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Oneclick-main.zip"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow