Analysis

  • max time kernel
    122s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    22-01-2025 11:36

General

  • Target

    RFQ PC25-1301 Product Specifications_PDF.7z

  • Size

    907KB

  • MD5

    f21647a476af0f9466128731728981d8

  • SHA1

    b32f1ed4f76f6f22639eafef0d5f69ad1a0df7c0

  • SHA256

    464542b95e9bff226a82674f3ca757a9ab87389b7f3a02810b9c510872445e72

  • SHA512

    4e3b19ad1e7af1d8d4b9ea5900955490e9f8d1d641fc78b864e911298ff28485b338805faebbcb3dcfbfa5e9a10df741658abd7690edc2fc16b3d42b8456627b

  • SSDEEP

    12288:bfNkEF94HpCjZK6JzLfSdx4G4vrtrfI30QkNo2tm0e91RGk09wNu1Hm1OwFigGUQ:xkCZKWfSxsvrJI3GoYe3R8gCg7EvVRzP

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\RFQ PC25-1301 Product Specifications_PDF.7z"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:1748

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads