Analysis
- max time kernel
76s - max time network
71s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
18/04/2026, 01:07
Behavioral task
behavioral1
Sample
release_final_1.6.rar
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
release_final_1.6.rar
Resource
win11-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
fcam_pro.exe
Resource
win10v2004-20260130-en
21 signatures
150 seconds
Behavioral task
behavioral4
Sample
fcam_pro.exe
Resource
win11-20260130-en
20 signatures
150 seconds
General
- Target release_final_1.6.rar
- Size 16.0MB
- Sample260418-bgzzyset9w
- SHA256 ebb955532954f6594e19febebe31ad9eba18074438fd48a05faa564d9f8b027f
- MD5 584e928b4f1bb8d6fac7ad317b3f04b1
- SHA1 ce3fd4933b62a28f148b65f8b70e9ce95a60e38c
- SHA512 d64053dab8bfd0d07fcc215ff35efda2bd684177f96a66de9cb289267c7a531a78f52c4754ee24da51d304d57440a7e9da91996f021b36c87addce463e947bb5
- SSDEEP 393216:DhtbJZDsuWhwsh60nOsODI/eAlUcOseSXxDvWu/l4jF5Vv:DfrDLWCsh606DIWlxszWuWVv
- TLSH T1AE07336256EE2C6675B84043BF5A73F22DCDA1C4307A2C0FDF4D509A0896D978867EF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4736 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4736 7zFM.exe Token: 35 4736 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4736 7zFM.exe