Analysis
- max time kernel
149s - max time network
140s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/06/2026, 11:55
Static task
static1
Behavioral task
behavioral1
Sample
tmpzg5mldwl.rar
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpzg5mldwl.rar
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpzg5mldwl.rar
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target tmpzg5mldwl.rar
- Size 1.3MB
- Sample260602-n3tfhsct7x
- SHA256 3e2a63a5166faad1d4185b1eba90f203ee1c8daeafa3105593a211b52f192c17
- MD5 dda74288c54b1930f74498f94320366b
- SHA1 b9fd9bfee23d80824a341b33e2051bbf1726a912
- SHA512 8e03dbcac643c174d4743d2bcb954919f0e5e9cbd82d1f6629077975f5450a8e3f6760070e0c640ff8f26bf96dc33f14b55f56e537f20bbc54fcdc63ac6ff016
- SSDEEP 24576:BNy6Z6ad50MuZw2PmrjXgC+y3Ho0oZu53eE3p4z6qazryMSwSIQT4m/Nv:7yrakdZw2OrjXgWI0Y2baEHZHa44
- TLSH T1525533E23707FA71E9B0D0F255061AD1926774CC2FFC8A68D6C308BF960AF7864D645A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1948 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1948 7zFM.exe Token: 35 1948 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1948 7zFM.exe