Overview
overview
6Static
static
3công việc.rar
windows10-2004-x64
1công việc.rar
windows11-21h2-x64
1công vi�...�c.exe
windows10-2004-x64
6công vi�...�c.exe
windows11-21h2-x64
6công việc/demo.exe
windows10-2004-x64
6công việc/demo.exe
windows11-21h2-x64
6công vi�...32.dli
windows10-2004-x64
3công vi�...32.dli
windows11-21h2-x64
3công vi�...32.dll
windows10-2004-x64
1công vi�...32.dll
windows11-21h2-x64
1công vi�...ls.dll
windows10-2004-x64
6công vi�...ls.dll
windows11-21h2-x64
6Analysis
- user interaction
yes - max time kernel
149s - max time network
142s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
22/04/2026, 14:44
Static task
static1
Behavioral task
behavioral1
Sample
công việc.rar
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
công việc.rar
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
công việc/Công việc.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
công việc/Công việc.exe
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
công việc/demo.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
công việc/demo.exe
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
công việc/msimg32.dli
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
công việc/msimg32.dli
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
công việc/msimg32.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
công việc/msimg32.dll
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
công việc/netutils.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
công việc/netutils.dll
Resource
win11-20260130-en
General
- Target công việc.rar
- Size 17.6MB
- Sample260422-r4e63acz71
- SHA256 5afd45ac84838b38445cbbb0fdeb4ae178cf24f1ef096f53a9553fb8c6676368
- MD5 6a11cbe2b7158db969566da4350abe19
- SHA1 db066fa03c9f482f95c65c92b38da67c74bde5b1
- SHA512 7669e82b301f60424dd788b1fb0b4d90aec2ca07acc4e98b676c0ba28f75a0f4d78398e7ef5034852028823b79a81ef4abe7e0947a2f5ba895bbc7debe4bc22f
- SSDEEP 393216:MKZKZN2jYNItXjv6KZKc2jYNItXjvedj/A:jONstjtxstj2drA
- TLSH T1FB1733FC4F1D139CFA4E52B41FD7C51E94290A78CA0E57164A33E376ACE68C1692ABC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4076 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4076 7zFM.exe Token: 35 4076 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4076 7zFM.exe