Analysis
- max time kernel
149s - max time network
96s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
23/04/2026, 05:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
OpenIV.rar
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
OpenIV.rar
Resource
win11-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
OpenIV.exe
Resource
win10v2004-20260130-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
OpenIV.exe
Resource
win11-20260130-en
0 signatures
150 seconds
General
- Target OpenIV.rar
- Size 1.1MB
- Sample260423-ghrb4act4w
- SHA256 2ed59c0252a895b535d5eba521c3c64e722152aa67f52e931ba97b3c10114360
- MD5 8fc1de54fbe78f8e0c5657c44911f412
- SHA1 7fb02fdf16df98f5788cbb8bd59441308e385bbd
- SHA512 a75a58248ce564e5991d88794cef8e44cc2fa34e4c0e84358da00bd3b95ab8ac67c45c250dc9b0936b89c012a478aa1e420827c94edb495716658b8d99cc2538
- SSDEEP 24576:/5itg6DSlkQjbOBnx0Xa3eN90+T33AMmB7UvBmG7js5e16FqMI07Evb:ZxkUOBnx0XaQHnAMYUvBmGHs5QdMIKEz
- TLSH T1614533D71B41EFF209789907AFE1C214B8EA43DBBA1D0CEAC0EABC85615613357935D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4292 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4292 7zFM.exe Token: 35 4292 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4292 7zFM.exe