Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
20/02/2025, 09:16
General
-
Target
invoice for payment request.pdf.rar
-
Size
503KB
-
MD5
793695022c7d04f0cc5fce7757e99745
-
SHA1
4db54cf90725f053f522cf007a93616313f37e15
-
SHA256
84dbf1a7bb1aaf5fa8bc981b98e91f904884f967f526eceb2a4ef19aaeee464d
-
SHA512
4acd7b6a56455c486ab6515d525857218c52afc8a66a1765901be982a04577e10fb085bd3f4509d613edb05ed90fc028babf90da946c0202ec2e27778a2a6eef
-
SSDEEP
12288:d+vDOAEtBaXdXsgxdx/1KguE27g9JmZO4WJA3UuOP+MUMvG:ya/tBaXdXhxdx/slV8u3Ur+MUMe
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\invoice for payment request.pdf.rar"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow