Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
06-02-2025 16:51
General
-
Target
S0FTWARE.rar
-
Size
17.1MB
-
MD5
4f4d6b8038f0161743a0417cf4075e3a
-
SHA1
5af34fbd37ebd0ff8061a0f8d7cb513ab56cebf2
-
SHA256
b6fc49b8355a266c4914ebdb0ed7f00820c393bd5c1f136049480e08e8af4309
-
SHA512
6b3a9c8c567a6fb445bfdb13e51537aea77fedbe5b471b0889815eb782791f15e6b1e4a0d4e7a850d29e86f078b65e8e7ecd0e4e4de8cd1ce8b8b2fcba5647a8
-
SSDEEP
393216:bvw+bRdjNzBnHt+XhuNADR2zZHtE12RFeWkXn9fD+dIKVBtcbNlfHX0W7v:bvwuRPzBnHt+0SF2dHtEgv2n9fydIKVA
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\S0FTWARE.rar"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow