Analysis
- max time kernel
149s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
01/06/2026, 17:06
Static task
static1
Behavioral task
behavioral1
Sample
tmpv1p72h8b.7z
Resource
win10ltsc2021-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpv1p72h8b.7z
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpv1p72h8b.7z
Resource
win11-20260513-en
2 signatures
150 seconds
General
- Target tmpv1p72h8b.7z
- Size 16.4MB
- Sample260601-vmtjxaa12x
- SHA256 760ff1234010dcf743620fba9441832bd3f46deaefd294a765a5dbe60ae7c094
- MD5 4f57edb9b2cc86c1b10b16674eaa958c
- SHA1 5a7e6857b0e81f80345e842f69666da7a5678b45
- SHA512 6367427ed27cb33d29b35acd8d8b92b678fffa8e65262cdb5eca6709832bf49eecc6b88d70816bcfd379a30fa38f6b05570b5349cd4081fa2a37d66bd2c02e89
- SSDEEP 393216:w8Lk/J4QCPNgYMAngGU7Oh9mMG+/+NaGSjuK2f2JypZVqZr0AXniX:wweSQCPNrZ/lGSjuXOJAqZr5iX
- TLSH T1B20733D20353DA690FDFCDC888606B377A2B123E4492664ABB0DD9FADE767410E31752
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4844 7zFM.exe Token: 35 4844 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4844 7zFM.exe