Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
11/05/2026, 22:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
tmpvvbgwuis.7z
Resource
win10ltsc2021-20251017-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpvvbgwuis.7z
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpvvbgwuis.7z
Resource
win11-20260130-en
3 signatures
150 seconds
General
- Target tmpvvbgwuis.7z
- Size 276KB
- Sample260511-2w4jssbv3x
- SHA256 b936f92556265514643d243e3d354ab28c11c86990fc2321f573bd90a39fffaf
- MD5 6b6d3e0ba4a75f5e143e502b09747f6a
- SHA1 98446966f43f58478c080fb2218766bd1209ebf7
- SHA512 e20a72893955951b85501b997479fa843efaf37f08aa4185fec0a55b5fc6d395289450dd990ac8f02b95038dc517f9bc643ed4897b0443117ff792820fded9eb
- SSDEEP 6144:pmAZKMJoPrKcIj0M5/Vfy+pw5nG8uDR74AHgiFr5tB7j+uw59QAauaVf03:YA84omcoB6G8+74AzFrnB+nDVW03
- TLSH T1F0542393A631413811FE0D75DCA32EB463383117EBD90AFD980F7A220B97955F8479EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1404 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1404 7zFM.exe Token: 35 1404 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1404 7zFM.exe