Analysis
- user interaction
yes - max time kernel
898s - max time network
440s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
27/06/2026, 12:13
Static task
static1
Behavioral task
behavioral1
Sample
R4Z X SIFE LANCHER.rar
Resource
win10ltsc2021-20260513-en
4 signatures
900 seconds
Behavioral task
behavioral2
Sample
R4Z X SIFE LANCHER.rar
Resource
win11-20260513-en
3 signatures
900 seconds
General
- Target R4Z X SIFE LANCHER.rar
- Size 20.4MB
- Sample260627-pdsncsbs2r
- SHA256 4f6855c96399c6ca4d9052107c62021f1e43d3fd852e53a9078963e216ffec06
- MD5 3de44d99c67b07abd9ff095e9ef68054
- SHA1 4facec01ae609708b3385a47f0fa30192b2e23f4
- SHA512 a39768a51cae19f793ddfca992fb33c11f1489a7b5f3eb491a0f59388c94d15e7a13229241f34932711971984d993bb1b364a3a546b77a942dba00d48fee0477
- SSDEEP 393216:wi+cqrQtb4SL1eZJvkGZijS/GV5sUKs1k2/JIormv0JmMIpghhn9c:wi+p6L1e/v1oS/Gt3K2/JIoriESpQfc
- TLSH T14827339BEE61C16A7BC12D4721CF3D8109DFC59AD8DE983D307870CA5E84BE44274A6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2924 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2924 7zFM.exe Token: 35 2924 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2924 7zFM.exe