9395981b714f0f561d0163a1f8ab16c7be8ae70ee5356e49939d4843beb3f2d7

Analysis

max time kernel
149s
max time network
95s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
15/04/2026, 06:22

Target
z.tar
Size 15.6MB
Sample260415-g47afaa19x
SHA256 9395981b714f0f561d0163a1f8ab16c7be8ae70ee5356e49939d4843beb3f2d7
MD5 07d13253b53e6b2f6d6a30808148bda0
SHA1 7cfff2cdd7f3a98b5548bc068b88e5e412a0a66c
SHA512 d6e69a12eafb712dba3f17ce9d4cc607ed2ca2fb26ccc6d050ae028d3a05c48dfd1f8ea3bbe30bdf37a41181b17ec111265157a1a2554b415ecb976b8c366d68
SSDEEP 98304:LVKTmWTTWTsACPwaxuTcjcHCh5Nr0Trcp7cnuSwu5l4Ce7/ZTmIZv9lX9QZ:Qy4aIACPwaxu64u7QfS7cxTuXhZ9C
TLSH
T1ADF65C67B94F4976720084B0524FB414AB818AAB25341C65FBDDA37C3F15ABA60BF3F4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2508	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	2508	7zFM.exe
Token: 35	2508	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2508	7zFM.exe

memory/2508-0-0x0000023382CE0000-0x000002338348E000-memory.dmp

Download