Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
01/06/2026, 16:53
Static task
static1
Behavioral task
behavioral1
Sample
tmpomqi5rr1.7z
Resource
win10ltsc2021-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpomqi5rr1.7z
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpomqi5rr1.7z
Resource
win11-20260513-en
2 signatures
150 seconds
General
- Target tmpomqi5rr1.7z
- Size 16.4MB
- Sample260601-vd4zaaay2w
- SHA256 2c0fb7d82352760981c66d94825b2486094624742f0942b64dc21c21fb557408
- MD5 8cde427eaddf18da8aa836c9b1adffaf
- SHA1 0626d74b1a202df06b9afe6ee5b8e56619c205c8
- SHA512 96568f967ba0c4e19c58ff5f6bdf3a1e8f0157f50d7a7d355fdc9700b5208f91dc80f287a3407d7525df58e663851c4b6a58640a00b8de931d12dba034cd54ea
- SSDEEP 393216:1mLuEocuQ6LZh0BEhmMRnum4aq43l38/exeW/:1mL5o7L0BEhmMRnlNJ3eW/
- TLSH T1630733E28F3D9F52FB23FD7D2E4B984800E176CD2E4616075AEB5C966C51E41EA09F08
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1984 7zFM.exe Token: 35 1984 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1984 7zFM.exe