Analysis
- max time kernel
149s - max time network
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
23/05/2026, 00:05
Static task
static1
Behavioral task
behavioral1
Sample
tmp73aynhj8.rar
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmp73aynhj8.rar
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmp73aynhj8.rar
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target tmp73aynhj8.rar
- Size 1.3MB
- Sample260523-adfapsbt7y
- SHA256 383dcdb24c5b1667742c98b7436b1b75fba13c7d1be19a533369f6ea9a674417
- MD5 bec74831e6a6b655e9cfede68d9d7be4
- SHA1 b712b37d5fcff876d6da83a2505ed4863920e912
- SHA512 fa10ee2e466ff0d63f5b99ce3413c251fa80d5738349401ec4d3938b85ee106a0e66f563c312d22d1b1038634168a7241de3166c4993eb159fae73d1615c5d2a
- SSDEEP 24576:EkXxA1Uaw8ieNNfkCjSatAGNn1RQ2mH1yjkbZyMCyp+TjnRP:EpLw1eNNfkC/tAGdqVyYbhCiWjnt
- TLSH T1FB5533CAA671ABC91CB62F97C4F6C3D8473236DAB5BFC9BEC64C0B2752183581424874
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1936 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1936 7zFM.exe Token: 35 1936 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1936 7zFM.exe