Analysis
-
max time kernel
7s -
platform
windows11-21h2_x64 -
resource
win11-20250502-en -
resource tags
arch:x64arch:x86image:win11-20250502-enlocale:en-usos:windows11-21h2-x64system -
submitted
17/05/2025, 12:56
Behavioral task
behavioral1
Sample
TradingView_Premium_Desktop_(password_github).zip
Resource
win11-20250502-en
0 signatures
600 seconds
General
-
Target
TradingView_Premium_Desktop_(password_github).zip
-
Size
133.0MB
-
MD5
990d301095ffd7608c76d9f326d0bffe
-
SHA1
8ec5fad5e4c8d8c36f2946a4ff0ce6d2cd0456da
-
SHA256
98344f0bd2dfeafb7a3029285d29992c813ef283faaef509a357c76db07308ae
-
SHA512
7443450c402ff7d30537fc0609eeb4ab45543193425c630840bd705d648e606edc82d0b5ba2b3d5fce8eb234a66ed40af026b5bbf9aeb8d9582e210ea2ce07c8
-
SSDEEP
3145728:ggOcxM/7xKr66Ktlch1JUaE9Rvy3zPIOhfwvS1+:ggOcU7xVtOJUHvyjPrwKM
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\TradingView_Premium_Desktop_(password_github).zip1⤵PID:3028
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4896