Analysis
- max time kernel
149s - max time network
149s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
17/04/2026, 16:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
مجلد جديد.rar
Resource
win10v2004-20260130-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
مجلد جديد.rar
Resource
win10ltsc2021-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
مجلد جديد.rar
Resource
win11-20260130-en
3 signatures
150 seconds
General
- Target مجلد جديد.rar
- Size 13KB
- Sample260417-tkmsxact8q
- SHA256 a2f8d3fb8860e22c501a8ded7572b52dd2acb04f7a782f78f9683af8a5a731e8
- MD5 92ba843860f74a7e4427eeed02b5dc6e
- SHA1 155f6fd1f97ef2f9cfb2935becd999c22932da9d
- SHA512 7f18ae3f1040f84cd6d073752a4f83a22c88df7b28d123b6461d665ded8b858a86608542b2979ad9de5a75b429912523b68d9ce30f6604d95ba85050b5a07eef
- SSDEEP 384:y7UIOy9sz6qV0b9eqvFEPoxXYy/xkWSemj8Q:vIweqV0bMoEgX/gtf
- TLSH T12952D1FBA7EF66E0FA701D9CF9A428041045A9ECA852D11976C0316630E7CA4FE38C29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1452 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1452 7zFM.exe Token: 35 1452 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1452 7zFM.exe