Analysis
- max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
24/05/2026, 19:22
Static task
static1
Behavioral task
behavioral1
Sample
tmpkejmw33x.7z
Resource
win10ltsc2021-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpkejmw33x.7z
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpkejmw33x.7z
Resource
win11-20260513-en
2 signatures
150 seconds
General
- Target tmpkejmw33x.7z
- Size 13.9MB
- Sample260524-x2891set3m
- SHA256 07c91e3316ebd7aac51b01652f0fcbd55e453b7e1e22e7aa3d1449ab8ef32796
- MD5 34182beeabd33159ba3d94d669684393
- SHA1 8e5d9fbf124dff1652eb038a6465e5deb9b3b1b7
- SHA512 6cd9486685a1fe25a16d8bea63ab4d938f8a891d046b19b22366839c4e606e1c33e31260328f7d3ab1c08b03210cb89c0cc967c14065667213afa468a95b534d
- SSDEEP 393216:kFMUGcWj5Gw4Qis3yEaWcT5Vv7OeLANCRuBfQY:kTWjqVMyEYZOeMNC4Bf5
- TLSH T1B7E633338CBAB5CE3CD021C6A514660FAE903F8AC549578BD4C2A63B45CF116C6DEED9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4328 7zFM.exe Token: 35 4328 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4328 7zFM.exe