Analysis
- max time kernel
898s - max time network
434s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260130-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260130-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
18/04/2026, 16:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MrsMajor2.0.rar
Resource
win10ltsc2021-20260130-en
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
MrsMajor2.0.exe
Resource
win10ltsc2021-20260130-en
22 signatures
900 seconds
General
- Target MrsMajor2.0.rar
- Size 19.7MB
- Sample260418-tlj4eacy4n
- SHA256 3a8638a764c9b0828df230fac613d0b7402c21189f6a1148adca402472b31141
- MD5 6be0eea7209fa6e64ab9c4415172fb7e
- SHA1 99739ed8788430f1df7a9ebf80ab29d0f33886f9
- SHA512 6bc187397ad4bf14ed3681963584824a779f4d4fb5f5d5a52788080fb78cf211c0cf6bff8ea27ad8a5cca53fdff9659f288b3e4a2c8ef5a479e879034fbbd0cf
- SSDEEP 393216:pObYcuKh1Qg75KUy2ZVQbUHmoYPDWFesJ0CMPIjpmUv4GTMeG6jHvSCeEWHtGvnT:kuKhCg7sjIC0PKWFesax8uGQeHjHvSzW
- TLSH T13127336679F8638480B022F65EB66DC7F2104CF75A3441BF5C420BC99CE75AAAD8393D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3900 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3900 7zFM.exe Token: 35 3900 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3900 7zFM.exe