1ca0e13ca8b3498d058fb52e3438c07a95066cc5757a6b39a34c5e7d20d2f71f

Analysis

max time kernel
298s
max time network
55s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260126-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260126-enlocale:en-usos:windows10-ltsc_2021-x64system
submitted
17/04/2026, 13:03

Target
monoxide.7z
Size 155KB
Sample260417-qagblaex2r
SHA256 1ca0e13ca8b3498d058fb52e3438c07a95066cc5757a6b39a34c5e7d20d2f71f
MD5 ca719f094511706a97947940bd3e68b0
SHA1 700cea2f8e55b776ee631153e26c76376fef3e52
SHA512 83bb963264da3e7d942109f0b1b62c6d43cd75a1f322982e44198851d901f694fa2436dcf1aa9298a26208c4fd1742ee0cba43e0b7671d3b5b6aac08846e525b
SSDEEP 3072:MVFvDla6gxCiUGw/+YP3/QxYprQx0XcfGn6RtqNVROFoZm2cb2U6WpHt:MVllSsiUGw2o3/QWpCC6iNnO0cy3WpHt
TLSH
T199F31208A45E7748AE22A3C406DDBEE021B6CF1AC266C5107B7BD36CBF95259C737345
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4144	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	4144	7zFM.exe
Token: 35	4144	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4144	7zFM.exe