Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/06/2026, 12:27
Static task
static1
Behavioral task
behavioral1
Sample
tmphlxj3beg.7z
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmphlxj3beg.7z
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmphlxj3beg.7z
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target tmphlxj3beg.7z
- Size 1.3MB
- Sample260602-pmz4ssds41
- SHA256 fe60423f70c5f5bc11265ca96a204de1bf91f34a6733a022c8d668ff81620765
- MD5 63dd63929f2a5a0483a48863be479262
- SHA1 29596f84bbf70a647d204b45d2f856a2659f4a11
- SHA512 c450380c8e4317db1632e7c6edafe89e7bd275d1be9be440e73ad2d0d26e0aa0f62444527e101b7d8ff381fcf287eca5f7fa5856322ad30dc1d8769a356309d0
- SSDEEP 24576:qBB8BV22F2SrPoF3e4LDMyJV/bh352pl8Z7pwtW+Z3wLnBfgPS1RrxBkcC:qwc35Mo/bhkgv63kOGr4F
- TLSH T18A55339C7E87FD2298E3E54089A3E767FC59329D4E4884E203419F9352F20766363E8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3876 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3876 7zFM.exe Token: 35 3876 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3876 7zFM.exe