Analysis
- max time kernel
149s - max time network
156s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
02/07/2026, 11:46
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
tmphzmgdw0u.rar
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmphzmgdw0u.rar
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmphzmgdw0u.rar
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target tmphzmgdw0u.rar
- Size 15.6MB
- Sample260702-nxpkdahs5w
- SHA256 ea28a1c094a552d032d5cfdebc1e9a4b1b37954ca18376e435e62a51eefce420
- MD5 83a024340117423f41e1464f1181eb3e
- SHA1 f6fcb83b2d61c259d3269e8be0ee960c6ae53d7e
- SHA512 dc00ded0edbc933f0aa247c4cc6b585b07035435ee204c9e8afba48286574bc61f6887d66bdc8fc70317d68f01356a38181629d4e34df1e58edfbca61a643ee7
- SSDEEP 393216:iUkODtlD14Gb+cn9cnbcF+K1Jg5zRzLYT1:iUl14k+cn9cnYb1Gdlm
- TLSH T1EDF633BF0A7F1BCB15CA097E49A4AA351766C92615D97380F46B19CC848FDDB2F0FA10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4272 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4272 7zFM.exe Token: 35 4272 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4272 7zFM.exe