Analysis
- max time kernel
149s - max time network
154s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
23/05/2026, 01:10
Static task
static1
Behavioral task
behavioral1
Sample
tmpl5mft9i_.rar
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpl5mft9i_.rar
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpl5mft9i_.rar
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target tmpl5mft9i_.rar
- Size 30KB
- Sample260523-bjef2acv2t
- SHA256 2db503c7e6ca589c1ceb3b70b4ba21642653ec23cb1567b6353169dd505b0239
- MD5 49bfd840a7701b6d02710c01e90b9bae
- SHA1 ffe565d51ffab7df1bd30fe7d2a0f0b3dc8cc8b2
- SHA512 ad3ecb546416670d3f4613b22b43cf87b58b821de0afea0db254f24ac1b9e178819a86959001fdcf70d048ff05d64b2d21b1ea539663f15a65c4b2c35e9893b7
- SSDEEP 768:aYYKgUUVIgd+Nuyj4NUBnfxm9jYYOrSMpo/0mD7A:aWhUVIgd+NZ8Knfx0jVvQe5Dk
- TLSH T185E2F11E13F237ABA95BEF7BAB3932F667ABA6415340444559F0059EE6843D0C3212D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3408 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3408 7zFM.exe Token: 35 3408 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3408 7zFM.exe