Analysis
- max time kernel
149s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/06/2026, 14:18
Static task
static1
Behavioral task
behavioral1
Sample
tmpp29y6pt2.7z
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpp29y6pt2.7z
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpp29y6pt2.7z
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target tmpp29y6pt2.7z
- Size 7.0MB
- Sample260602-rmhkvsft9z
- SHA256 c83ee5e6d21a8e458941605b71d2ccde82e3258872cec8413b1a10ce6dc42cd8
- MD5 a8e5d3bb514a28e2503524a5c2896876
- SHA1 620801973cf70e9c12a88521fb41754823bbc6df
- SHA512 bbeb2fb57f62e00cef1deb1dc2807e2d396d4519d3e793bf66daf93beaa1a01106bf788fed43ae3a6e64e944bbf16a28ec3fec640c592770dd710fb91df7eeb1
- SSDEEP 196608:jxqBo5ImNmoIoCtoEISOXi+BYxIyZY/YYi:jxcHqIoCy5G+IRY/YYi
- TLSH T13F76335C5F94C304A59DA0580D38557DB1CC4E94BA7C6C2BFA42B3C44ED2EAE0BEA6D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4980 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4980 7zFM.exe Token: 35 4980 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4980 7zFM.exe