Resubmissions
16/04/2025, 19:57
250416-yph3qsvtgy 1016/04/2025, 19:49
250416-yjxzpsvtdw 1016/04/2025, 19:49
250416-yjspzsvtdt 1018/01/2025, 00:00
250118-aaawtaxjgz 10Analysis
-
max time kernel
162s -
max time network
212s -
platform
windows11-21h2_x64 -
resource
win11-20250410-en -
resource tags
-
submitted
16/04/2025, 19:49
General
-
Target
«FîleReady▬PassWord▬Is☼◄172303►».7z
-
Size
407KB
-
MD5
8f546fd8bc2b52410b1664cc4353f96e
-
SHA1
074a7013eb459c4a60f079ccb53dc0a6fd3da916
-
SHA256
70242bb3e670a4ead187ffe778b034eb96dc862188157715247a213ed3e73aa5
-
SHA512
f937ce99517d6acb08f4605d761adf3d5b18196d8f87423bcd879df5d3b67d04758ca1a63fbfb3e1963732de1f0a76648e497f6d9d846fd896aadc2ceb8e8d2a
-
SSDEEP
6144:qW1lD8lJNW/1ny1qK2DpyKs2MVUGE1tg+El92nLKq4BDr6iJW/GsF02gjOtW5ApN:VrCoNhgKs2MWgJl9xKiJW+A02yV6au
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\«FîleReady▬PassWord▬Is☼◄172303►».7z"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow