Analysis
- max time kernel
92s - max time network
100s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
01/06/2026, 12:36
Static task
static1
Behavioral task
behavioral1
Sample
Inicx.rar
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
Inicx.rar
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target Inicx.rar
- Size 15.3MB
- Sample260601-ptdjdaes9k
- SHA256 0e8c1f04d7a7260e06e40763120bcc79f486805f613d72f39b68487b35066c6e
- MD5 8c3fb2d07a661c1e81cce058d982a045
- SHA1 056dc41915f8fea0e4cf0d33edd8508c2f2aea07
- SHA512 3157bb9d484c024be1f1898e60eb9da3b388dce2dde50203ee2855649b3bb4afce4a2bc3cf03f7d1b812201f92269dbb702f4d209a4e1079a0811943677e692f
- SSDEEP 393216:8tmVySIcw9+WZCRBJNljK9XJhYAN8+CP+5UzvBZiVN1hqIw3:8M89N+yJSANvCP+KzHxf3
- TLSH T14CF6335586E857E395050FE03C9F3DD819629EAB31A5D13C6A8CE3EC96ED4E2C63603C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2036 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2036 7zFM.exe Token: 35 2036 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2036 7zFM.exe