Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
22-01-2025 22:16
General
-
Target
Orden de compra-password(Y6V1AmQz).zip
-
Size
1.3MB
-
MD5
2d433124b3245738a6af87f789fd8598
-
SHA1
7c4b00c26810e614dc088fb23ad7dad1e65fb560
-
SHA256
acba2aba05c54067a1837b23ede11edd44ae646f197e00285d0280681b3b2b2e
-
SHA512
d1dfea0143d6008038d14555a9a3b3bc0df8623dc82ca4b7cf7d09a6898acbca07bfcbf6f941a21d0419040290c9a0e13c57ad00e279152003327b0aa1ee1a66
-
SSDEEP
24576:SBAgQ98DvTa8rmjBY71ZgiRe1kUidx5PgQiyUoLgbp7VTZ/QLKG/0GV:hirXp1ZhREiOluKp7VTJrY0GV
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Orden de compra-password(Y6V1AmQz).zip"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow