Analysis
- max time kernel
898s - max time network
387s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
29/04/2026, 08:16
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
release.rar
Resource
win10v2004-20260130-en
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
release.rar
Resource
win11-20260130-en
3 signatures
900 seconds
General
- Target release.rar
- Size 97KB
- Sample260429-j6favaht21
- SHA256 b16048a37c4e5e7cbe23a02ae21ac8140cbbb7575edfcd7de23b11664b9a507d
- MD5 132c4a0a1efe997bbc33d3cf4ab1134d
- SHA1 ead2f657eb32316f91a98f9891e530fa230583b1
- SHA512 c6a49295317a1a3be480fa0d8045095039caea9b01f13bc894e778579aff37cea18fd48f7a65e8d82f2a9b4ed0df8d76790faa0961f863fd9c684fa7c67da48f
- SSDEEP 3072:X22DCuUeL09l9mNjsZQa5ifU0zYsAYqQ6I:X2o7M9mNjsZQaQc0kSqJI
- TLSH T182A312D0FB17CB2F10A0D0FA807DC39F91D3DD116C26873F2A53CA1AA26B69025561D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4004 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4004 7zFM.exe Token: 35 4004 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4004 7zFM.exe