acba2aba05c54067a1837b23ede11edd44ae646f197e00285d0280681b3b2b2e | Triage

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
22-01-2025 22:16

Sharing

Report Analysis Logs

General

Target

Nueva Orden de Compra 5424.rar
Size

876KB
MD5

beb2e5db810f2a6f3f4c0954bb204c33
SHA1

7d3b4915fbb95add8080a547438e91c2ed47adda
SHA256

eebf4e02ac5a900a8549a8b8c230a0445706ab295e49439f670bf2e3316d39bb
SHA512

2eb574baec2bd03053d061af8f4df28896a419c5ed072b4227f4a234ef943d01c25fb2a63cb998d00453116362803eda030bb73a4ddea1f5accd03e7e4b0c700
SSDEEP

24576:hOdGuU+dfrVS2TgEhBfWA9vPgK9kVCEwfIOTKD1F:hOwutdwa3DBpXkVofIN1F

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2992	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	2992	7zFM.exe
Token: 35	2992	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2992	7zFM.exe

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Nueva Orden de Compra 5424.rar"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:2992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads