Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
01/06/2026, 17:54
Static task
static1
Behavioral task
behavioral1
Sample
tmpms0dls0_.7z
Resource
win10ltsc2021-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpms0dls0_.7z
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpms0dls0_.7z
Resource
win11-20260513-en
2 signatures
150 seconds
General
- Target tmpms0dls0_.7z
- Size 14.0MB
- Sample260601-whc7sscs6x
- SHA256 51dd8f96204ac8231bc4698f00196ccc18b2ab04601d3174aa372111afc10e1c
- MD5 339851486146e5fbb9fe5477255a9dab
- SHA1 8979da432c8e3ff77dddc3e5231c1b9f45a2332f
- SHA512 2acc484c72ff41966b5795e3dc4dff4564e389bce5072ca3b89755f3416ad102e8692ac3fd4fb59804da6d96eaa6a18b52a412dbff22678e40c65ea2411ba6f9
- SSDEEP 393216:MgEsOWt90S+Hji/x3D9P53uOfQY8KULlg9NxGfXfqTQgd:eWTCebB3u2xG+NxGPfEQgd
- TLSH T142E633FBE509378A8AC444DA018F92C7B9C1B22E52D7A55DB81F707A0CC3557A298FC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3140 7zFM.exe Token: 35 3140 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3140 7zFM.exe