Analysis
- max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
01/06/2026, 17:27
Static task
static1
Behavioral task
behavioral1
Sample
tmps94cl2fu.rar
Resource
win10ltsc2021-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmps94cl2fu.rar
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmps94cl2fu.rar
Resource
win11-20260513-en
2 signatures
150 seconds
General
- Target tmps94cl2fu.rar
- Size 11.7MB
- Sample260601-v1wlesc19m
- SHA256 fe0751feb5733cb7133d635c7a8a73fd6861a66bcba3945c145538a899fd40bc
- MD5 f54d253462adfc689c931067fb2315cc
- SHA1 f8be84d45019f9fc71c8e8865bbc1a25aba934fd
- SHA512 f4d281b94f105731b3e63ac69601104e54c59b5d777358047d2de7a1b533b954d9c3e044a1c839a8921a579feb339bedf33b92943bde9b53360b8dd9cec3b444
- SSDEEP 196608:P4o6TOKm7TreZ4yhMy11T8nA9Wcw99zb60jKX4XXkjaOl+xyXJnlb1yyyQ93K:PN60PrF4MyTBg99/N+X4XXkjPgyXJ/y9
- TLSH T126C6336BA0A270EC4D1BC926582B3299E609C6C057EAF40670AEFBD111611FF957CFC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2612 7zFM.exe Token: 35 2612 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2612 7zFM.exe