Analysis
- max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
01/06/2026, 16:49
Static task
static1
Behavioral task
behavioral1
Sample
tmpswnbe1bi.7z
Resource
win10ltsc2021-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpswnbe1bi.7z
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpswnbe1bi.7z
Resource
win11-20260513-en
2 signatures
150 seconds
General
- Target tmpswnbe1bi.7z
- Size 16.6MB
- Sample260601-vb2q5sct4p
- SHA256 0d979ff0969d734b927e9202dd97d21ee8d8a63397c0884175bed15b2e0e1d27
- MD5 ea0280b854218e14cb094449bbe324b9
- SHA1 43ae6be9ab813f154a6c0f2d48cca2e308ea526b
- SHA512 6cf76b5fabf4985bbcc744bb1e66950874ecdf96c86c5bd0508b9f941daebabfe266e937c92aecd551093d21ceed7b4883e0a21a12f4b4097faca14eee24df8c
- SSDEEP 393216:c6HVtjPiLT2tNj5hlV1XwSd16QXP+wy0CEiYiLBfpqXsT:LCLTKt5hfGSWQrkNTqa
- TLSH T1210733258CE3DAF2E3F9B699B651C8B19F1BB1BCC11114605B5F73A13F0AA39F425A40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1804 7zFM.exe Token: 35 1804 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1804 7zFM.exe