985127ccfe57d8926de6d95a97d3f4b0d17ad353e6e8f8826c151569982b2b49

Analysis

max time kernel
598s
max time network
374s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/06/2026, 23:28

Target
Exodus (32).rar
Size 1.1MB
Sample260604-3f1nmsht7j
SHA256 985127ccfe57d8926de6d95a97d3f4b0d17ad353e6e8f8826c151569982b2b49
MD5 ded782e659af95f943b9a6c1f66dc72d
SHA1 602f44f8642030a413704f5befe6775a58f29b02
SHA512 bd1e3a77307a3e1ef760d1ccd9cdb7804f72c5f3780a2196c471ecfed4e31c21fb872ea666610244c3542a9b9a2ab5772a0ad971da7e9c811d0105e31b39b171
SSDEEP 24576:wM9pS2HTedqqpDqp31dmdOWV15SOCkdcj7lhYu44ZzsLjjICy:wYpS2HSdqqM+dnSOCk+jfYeZgIz
TLSH
T17F4533E982933CB4AF485B82DD536C7E0E818B421A445EB533F8FB151A7F5694A7F0C8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2840	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	2840	7zFM.exe
Token: 35	2840	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2840	7zFM.exe