Overview
overview
10Static
static
1message_98..._0.eml
windows10-2004-x64
10message_98..._0.eml
windows11-21h2-x64
1Sipari=?UT...?=.rar
windows10-2004-x64
1Sipari=?UT...?=.rar
windows11-21h2-x64
1Sipariş -...26.vbs
windows10-2004-x64
10Sipariş -...26.vbs
windows11-21h2-x64
10email-html-2.html
windows10-2004-x64
7email-html-2.html
windows11-21h2-x64
8email-plain-1.txt
windows10-2004-x64
1email-plain-1.txt
windows11-21h2-x64
3Analysis
- max time kernel
898s - max time network
430s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
04/06/2026, 10:23
Static task
static1
Behavioral task
behavioral1
Sample
message_9811_part_0.eml
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
message_9811_part_0.eml
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
Sipari=?UTF-8?B?xZ8gLSAgIDA1LjA0LjIwMjYuN3o=?=.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Sipari=?UTF-8?B?xZ8gLSAgIDA1LjA0LjIwMjYuN3o=?=.rar
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
Sipariş - 05.04.2026.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Sipariş - 05.04.2026.vbs
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
email-html-2.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
email-html-2.html
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
email-plain-1.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
email-plain-1.txt
Resource
win11-20260513-en
General
- Target Sipari=?UTF-8?B?xZ8gLSAgIDA1LjA0LjIwMjYuN3o=?=.rar
- Size 31KB
- Sample260604-mexmladv5q
- SHA256 bc4353cae5df38df81a951571f81f97d1edad589e0b556cb9aa3fbf3b4069d3f
- MD5 5be1f0f5c91f46eaeaa7bbaed26e30f8
- SHA1 0e29cf5f6e70d7349bcd1aeeda05b1dfabb2cea3
- SHA512 5bd07e2e1a059ac1b77836a3ea420aa85d5e3e755055abc120d1813181648c136f83874e47a0834ac256072e39650b64c5faebe759014b77dcbdd81219c6695b
- SSDEEP 768:99XMGGIEUaJ1Jh4F1jpLVN9arhZQDKj3EdtST:rMGwnh4FPJWrQDKGtc
- TLSH T16BE2E17C9D2834B58C6457AA04A19551FA7E25D8C2FE32287BEFF62D8320DB8CF1C515
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1760 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1760 7zFM.exe Token: 35 1760 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1760 7zFM.exe