Analysis
- max time kernel
149s - max time network
151s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
01/06/2026, 13:59
Static task
static1
Behavioral task
behavioral1
Sample
tmpjnninzpa.rar
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpjnninzpa.rar
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpjnninzpa.rar
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target tmpjnninzpa.rar
- Size 124.6MB
- Sample260601-ranlcaex7w
- SHA256 31b70192e11ad20e2b89782d917a08f9ba97a880448385acaec7f872a3b90f74
- MD5 a6e4aa1f0783ff19d2bc389ab1aec2b0
- SHA1 057c6fc4058afab094827e6c7251691c68d25d38
- SHA512 1742feba558dd1bbe59f31786c357f1c28bf957c338d4548dff3a230fbb5ed4ee8804ae869d086054eea345f6a096f43186bc43fe95a58b325914483ee3b3446
- SSDEEP 3145728:bqHhSP3A/8exxZivl96DyfNhBV/xH0a4vzhT0myPQ:ih+A/Fbivq+NhB9xHP4b4Q
- TLSH T1135833FE820583366C491762C1D5A852EDFBF6343B02CA556C6D2F7A6DC9AF432CB094
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4528 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4528 7zFM.exe Token: 35 4528 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4528 7zFM.exe