Analysis
- max time kernel
149s - max time network
151s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
22/05/2026, 14:33
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Zexion Build 22958417 Windows-CSF.rar
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Zexion Build 22958417 Windows-CSF.rar
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target Zexion Build 22958417 Windows-CSF.rar
- Size 12.2MB
- Sample260522-rw846sd13p
- SHA256 8b2ad36c69a4adf767ad1531933c3bb5fc8d8f49e6a597699197b559d9ea08a9
- MD5 96709dc4c927c1886a569313dcb435f0
- SHA1 8628e722d08e28515949b6a78b83cfc3ab6c576f
- SHA512 c5679841751c6fb36aee88a62f95bd90c0cb0749a48fffcb210d9b826f0cec4dcc0b8888986f55aac504870cfc669883fa132b1cdc6c04a405650faedbfb77d7
- SSDEEP 196608:OevJbQVZK84ANnDRpcIIrSiaV0VWft/SIaM2CxDDRZDk0OXYq2W++FVKxMEiDVpA:OKJMZKNsYdrSyVSaM2CFDWIqQMEiVpE7
- TLSH T136D6335076FE48891D78571623FAB283E16AEF43BB5B134D8720F40B2A55910AF297FC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4720 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4720 7zFM.exe Token: 35 4720 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4720 7zFM.exe