Analysis
- max time kernel
149s - max time network
160s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260130-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260130-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
24/04/2026, 18:51
Static task
static1
Behavioral task
behavioral1
Sample
Chernobyl.rar
Resource
win10v2004-20260130-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
Chernobyl.rar
Resource
win10ltsc2021-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
Chernobyl.rar
Resource
win11-20260130-en
3 signatures
150 seconds
General
- Target Chernobyl.rar
- Size 224KB
- Sample260424-xhvbrah13p
- SHA256 4caee449add49e07cb0185b790d0fcff42955d927b44c07e97d1af30e812cad6
- MD5 2c5cac98a995597235b4da9b8dd9366b
- SHA1 bafaea0293263d1384ac5b3fbd90a5c4eb491c12
- SHA512 3a694e3f261da12439cb5b3bc0d56a8688289e0be2883db5a37982c30f051530b39da0af57cc44f2d7221a6645f68ae9a8df0dca0b9a6f21fe291110ee8e84ce
- SSDEEP 3072:6uXPoJ7nPAb/w7GOuZJzoTPHEHN8C4tsnj171qSrrH3O+Ug5mKcEg/5512iglxi2:6AS6Isz0+m5OjR1vXmnZHglxCNgn
- TLSH T17C2423A7ECEACE996D52333524250BCE541AB45FEFD1D52323067736186F8AB4DE3028
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4968 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4968 7zFM.exe Token: 35 4968 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4968 7zFM.exe