Analysis
- max time kernel
149s - max time network
157s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/06/2026, 12:18
Static task
static1
Behavioral task
behavioral1
Sample
tmp0bceekn3.7z
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmp0bceekn3.7z
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmp0bceekn3.7z
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target tmp0bceekn3.7z
- Size 1.2MB
- Sample260602-pgp2mscz7t
- SHA256 1682dd4857883e9d5bff12d233ee6bc2bde45b6cc0dee427548afbe924fb2484
- MD5 d1eed5a99fcc431371c2e3a754d7bee3
- SHA1 6a4faa6c417b4b8353cbc68f88ed971ebcc420bc
- SHA512 d36c42fc44d1a5be69f1bc91e6bbd69252b5ee117641b12c6c64ba76d11a1338cbd8c5746942fb6bf056749bc1abe32677977c34d451aee59d8c9b40378dfdcc
- SSDEEP 24576:7mGf1jowkom/DxqEHpKJxA7z4+mspzWx0Dv7puCqcvDKMloPgs0eYmQajjdJfD:7v0okDx3Kjuznmsw+DvFuEDKN4sfd5
- TLSH T18E5533F103ACEFE260825D31CCB5B81652FFBAA1E241D207ABEE07B5D159119C6B761C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2016 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2016 7zFM.exe Token: 35 2016 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2016 7zFM.exe