Analysis
- user interaction
yes - max time kernel
899s - max time network
395s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
22/05/2026, 13:03
Static task
static1
Behavioral task
behavioral1
Sample
BYTER.rar
Resource
win10v2004-20260513-en
12 signatures
900 seconds
Behavioral task
behavioral2
Sample
BYTER.rar
Resource
win11-20260513-en
2 signatures
900 seconds
General
- Target BYTER.rar
- Size 398.2MB
- Sample260522-qagblaes7s
- SHA256 48f3b4e66bf28ee0aa22a9523470ce72ab84d524fef98a1711bcf0349d70fbe3
- MD5 ec52132ff52a60511aa5a254d848cbeb
- SHA1 6c07b5d4a17a2c21b120b7a77cc092517ce4f3df
- SHA512 4838d4df12379a5e23628d600c640d4dedd89310b11c0358ceefff1b6ccf49fd7922ae18f1f32d73950e465fee934681ca90095df8cfd1289e346906ea2aee53
- SSDEEP 6291456:5q7NxkiAzEgnazLAMiSOIDtoUXwXxlo7bdSPXPHjQ60qPRciuxTo:cxkiAzrazLAMUMtRwXxlo1MfD1RciN
- TLSH T1A1193304909E9E2C05776C8AE5C034FF3A18A4A76BB7F970A692D91F31BD6B40D4E713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3836 7zFM.exe Token: 35 3836 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3836 7zFM.exe