Analysis
- max time kernel
149s - max time network
151s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
01/06/2026, 18:00
Static task
static1
Behavioral task
behavioral1
Sample
tmpylz7p24s.7z
Resource
win10ltsc2021-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpylz7p24s.7z
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpylz7p24s.7z
Resource
win11-20260513-en
2 signatures
150 seconds
General
- Target tmpylz7p24s.7z
- Size 3.2MB
- Sample260601-wls3esdx8m
- SHA256 28085d995e1b9a8bde3e2eb61c23accd28be7ba3dc99c4397508a7824e5d358a
- MD5 b35c3d02f0849db58454359ead4b6755
- SHA1 3c163d61af23f472d114fdbfb2c4d3a2ddef6d76
- SHA512 6b823a8a58f581964388b387860ba2d41e0475e3e284a353d19d6195a8b3cd96b8a837b433da099c39010b6b9c8d2d01d05852c5d55e9dff9c1293bec5d7e1d5
- SSDEEP 98304:3e/mSuTEda5siG7H4zp3nghHBL0yQM8QOhFKFMJ:uluIc5sP7H2WL0yQlQqFF
- TLSH T114F53300A28145EC59D727C28739168FD7A7F0FA84FBEFF8272AF921A05955CD06B44E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 984 7zFM.exe Token: 35 984 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 984 7zFM.exe