Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/06/2026, 11:47
Static task
static1
Behavioral task
behavioral1
Sample
tmpyqemih9y.7z
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpyqemih9y.7z
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpyqemih9y.7z
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target tmpyqemih9y.7z
- Size 1.2MB
- Sample260602-nxt5vsds9n
- SHA256 ebd8d6a612daaad6d0a38262e617b8c52e0d40d2ee83d5ce11fa894061c8f11f
- MD5 285e002c62644f524d50ae05568c4d4d
- SHA1 4d7928130ba2743a9c3e7806df3f5d6867fdaf01
- SHA512 d6a0fa75cb9a8214861476d3330c04398882e50179a3d406736168e672389c167bc62bafb263f5516100edd7a982874f204712e4a583411959bd19f385dfbf9d
- SSDEEP 24576:jAFu86ggK1SV3R8l3duvPYBoy5FGuWQPRz4n61mC41xiKBcS6g94:jYu86ggKkHYBoltg11y1FYc4
- TLSH T1955533E9AB2C653D91134BCE3A6C1E99C2D8027BA0B54D4CDCD06878BE5E473B5BC067
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4596 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4596 7zFM.exe Token: 35 4596 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4596 7zFM.exe