Analysis
- max time kernel
149s - max time network
127s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
02/06/2026, 12:30
Static task
static1
Behavioral task
behavioral1
Sample
tmpfgol7s18.7z
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpfgol7s18.7z
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpfgol7s18.7z
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target tmpfgol7s18.7z
- Size 1.2MB
- Sample260602-ppgegads8x
- SHA256 7ed2706576120c59ec3dc67b0cb398c403c959bff4c04c899268706136efcd9f
- MD5 ffc7de7e60de1ab83b08ea4a78f3a591
- SHA1 a1d138bac7c6a70ab2822e37effe2223260e2d4c
- SHA512 a6e9b71b354e301d9e36f108a970e9cd2752c5c3c348e6d3a1bbd1e12a5c1fbeba405f4831b8e0ea765ae53140f9002172b8d8e814d0dacf659cab99c89a11c2
- SSDEEP 24576:BBlqmo4LdME9OSlf6wZ3Vk2y1zNa4gPeBwDoWgBprKZ21YFwk7VjX++J:7smo4LdMu6Y8Ja4zcIBprK8awyV7/J
- TLSH T1255533CF6821BE034B06370D2D0EBD9EFA6E85D725DA0D1B51BD70D8441BB32641DDAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1264 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1264 7zFM.exe Token: 35 1264 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1264 7zFM.exe