Analysis
- max time kernel
149s - max time network
157s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/06/2026, 12:22
Static task
static1
Behavioral task
behavioral1
Sample
tmpjoydsr2y.rar
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpjoydsr2y.rar
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpjoydsr2y.rar
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target tmpjoydsr2y.rar
- Size 13KB
- Sample260602-pj7dpset5j
- SHA256 e1c3c06d2742c4245eb3aa2fb3e077a5eab5647645712846a4c9d29b2fe05c96
- MD5 237c0cff8cfa139f33665a9e2e15abfc
- SHA1 13bb6c12d0f7c9126996db96b51eed4dad9a87c5
- SHA512 0971927cb77cab0abdcef75b98d344d7d2dd69c3cf164e921884d30f31428c8e6931b1675b1e82acb20c0d5db4e0e0be647f16db339560dbc51f3e4273567dfd
- SSDEEP 384:4SFoNGRDF+pwJyQTxxwGVVr/BpSnqw9KnB+JVy0wYFRh:XpDByixxZL/DSnPKnc9h
- TLSH T19452D08A4CA1EE18B4674E3F4FA12468B4EB4347A3F42427FA961FDC0326C8DC577652
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2296 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2296 7zFM.exe Token: 35 2296 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2296 7zFM.exe