Analysis
-
max time kernel
106s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
28/03/2025, 10:15
General
-
Target
ORDER_253890-5645FD.PDF.rar
-
Size
97KB
-
MD5
fd8b56b3605ed617f5d98e77ee381719
-
SHA1
ad519ff9506ff06dc04bd28d5f22d5f5c0721d44
-
SHA256
9ea5c3c4853cb66cb692d2f1bd8d6405ca469487e69a6bac3a83a0c1ef64d784
-
SHA512
eafaf8936d9fc8dc84ef8d7add5675861c9360ee252ea51078f1e1ea39d84563098d2d5ad2a2e4b6f967a67f61ef21716de909afdc1e49ff3f9ea481db32f57a
-
SSDEEP
1536:+nd8Mu0gM8lx8GkWSWgNN9DXhCIPFKbM7sYyZu8ZdLhCW4rVSJmhvUHnBRBRkM2k:um0SxXkW0HDXhFPob8KDZiTuHnAMkWv
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\ORDER_253890-5645FD.PDF.rar"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow