Analysis
-
max time kernel
102s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
22/03/2025, 17:40
General
-
Target
REPO_Fix_Repair_Steam_V3_Generic.rar
-
Size
10.6MB
-
MD5
d27dc422ef9c7ad7edd6ef4e1278676b
-
SHA1
f6fe0fe1944028a104fb6544cd8433d0de016c2d
-
SHA256
64a32ac6adbb8ccada1ca74ed4af18eb3e38620b90d2573b2f8954bbeb6364b3
-
SHA512
2e95ce76822291bcaefb323f25913f5bf939b63fc98809668c51e9b795b363b84bd75791b6f40cd40b15344f1c9736777e305bcb91e024cf688403cc92eb3a15
-
SSDEEP
196608:/TTxcr8Za4eGgrnJeoGaR7N6sIXhQYY1GmCoUOydWUVsyssY6VXBTLa7Q:rTY8ZCJeiRIXh9GGpNpjsZ36VXBK7Q
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\REPO_Fix_Repair_Steam_V3_Generic.rar"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow