Analysis
- user interaction
yes - max time kernel
898s - max time network
558s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
23/04/2026, 20:04
Behavioral task
behavioral1
Sample
Xfer.Records.Serum.v2.1.2.update.rar
Resource
win10v2004-20260130-en
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
Xfer.Records.Serum.v2.1.2.update.rar
Resource
win11-20260130-en
12 signatures
900 seconds
Behavioral task
behavioral3
Sample
VR.nfo
Resource
win10v2004-20260130-en
3 signatures
900 seconds
Behavioral task
behavioral4
Sample
VR.nfo
Resource
win11-20260130-en
3 signatures
900 seconds
Behavioral task
behavioral5
Sample
Xfer Records Serum v2.1.2 update.exe
Resource
win10v2004-20260130-en
6 signatures
900 seconds
General
- Target Xfer.Records.Serum.v2.1.2.update.rar
- Size 10.1MB
- Sample260423-ythb1agz6x
- SHA256 c4621ba2ca0816e2f8da391c9e088187b4ce65b7f828eac06a36af381ff802aa
- MD5 75c4fe57e952d071df5ee8293ae358ab
- SHA1 0fbc70771fcea6c74d7cc77831796de5f2680c51
- SHA512 a1a35239dda1df5c34c75bb24f89e4127c3798fc6ebb483f9a95918a531bd52475ca2272ba836c69384af2e00c459eb8a1d994d80fa6d57b13b3a136d8072cfc
- SSDEEP 196608:57BZKaTsv6sYXBWp0Sd6BgEY9EkgAYkx0S9vmW1UQm2hk40fbQEA:lBZJT+6sYRWpXDENArx0SBFm2m7bVA
- TLSH T116B6231BB25F653DD45A5A318573C2205A3B7F62A4328D2F46F43D0DEF264880E3B6B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4940 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4940 7zFM.exe Token: 35 4940 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4940 7zFM.exe