Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
22/05/2026, 23:20
Static task
static1
Behavioral task
behavioral1
Sample
tmp0l_la3nm.gz
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmp0l_la3nm.gz
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmp0l_la3nm.gz
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target tmp0l_la3nm.gz
- Size 16KB
- Sample260522-3bv8csf17j
- SHA256 3bd4b77bb1c0f8fe93b5542f0dcf1fe0e4b55e605187f405d6eb4408f92fec35
- MD5 255c2e6485ea483abc24ba324dc9fcae
- SHA1 6162cfabad4cdd2721512ad0584afff15da477c0
- SHA512 6bc62e5ff6813333e5780bec475b155faf4e7a1395a122914c4120de58b3ce131d22d0bc01fb2a060f91aa1c52541edc2f874277a4ce480dffe84b7c42d8e175
- SSDEEP 384:7uD0R70vA3GrGxxLDUIKGD9acmlN6E1HLFpU4UQwbCSRYv3TPSm0a8:7G050vA3wt1GDJqN6gHhKxQEp+v7S88
- TLSH T10D72C17A0C0A1466F4A389458602C7064C350729F127E577B3D4A7F5DEB5A02B3EEDBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3932 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3932 7zFM.exe Token: 35 3932 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3932 7zFM.exe