Resubmissions
05/02/2025, 10:25
250205-mgcefaslhw 1005/02/2025, 10:17
250205-mbs51atmbk 1005/02/2025, 09:15
250205-k785zs1pfn 1005/02/2025, 08:48
250205-kqq8vayph1 1005/02/2025, 06:31
250205-hae5jatqgt 1005/02/2025, 06:29
250205-g8xlsstqax 1028/07/2024, 16:38
240728-t5tryssgmm 1007/07/2024, 14:07
240707-rfgd8atekm 1007/07/2024, 14:07
240707-re689awdpe 1013/09/2022, 17:54
220913-wg1lpsgbg7 10Analysis
-
max time kernel
106s -
max time network
204s -
platform
windows10-2004_x64 -
resource
win10v2004-20250129-en -
resource tags
-
submitted
05/02/2025, 10:17
General
-
Target
RS.7z
-
Size
20.5MB
-
MD5
2e40472330409ed96f91e8e0bb796eb4
-
SHA1
8fd90404184de1a627068a93482313449dbbec91
-
SHA256
c5741701b3866459dd1ffa2477cfd8776713612912693a5897f78aac795d23e9
-
SHA512
b11720cb8519fc6838161ba8bf696681b242b0789ffd5c442efbb50161d511fd65229ca88a347c856e8ff91501c077f5de7714b09e29d4400f595bfe7829189d
-
SSDEEP
393216:NkDF1XseDcJIrXeSG0b5mKZ1F0gvpdO8GPnqzHLP3iN5M0CptgNpAcklC0CN:GDjXseDcSra45mKt0gvT0PnMbzkNpAc/
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\RS.7z"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow