Analysis
- user interaction
yes - max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/07/2026, 12:23
Static task
static1
Behavioral task
behavioral1
Sample
image001.gz
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
image001.gz
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Behavioral task
behavioral3
Sample
image001.wmz
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral4
Sample
image001.wmz
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
General
- Target image001.gz
- Size 41KB
- Sample260702-pkr1eaas3x
- SHA256 6f3882b9f9198d8108a475568c6be673ed1e9df75c431a4121ff3fb8aae0280e
- MD5 b311d7f78c37542d69dec2a8a897041b
- SHA1 9ab973b581921f5eab0670c5d60dcdebbd0c29cc
- SHA512 88f408942d6c78376198b598b1c40b8998ac6b90ea5e797a0763977b4b05e059b5e9ab0f319e3bbc14a392422887636ae183b8d6e8fad5c3732f67df8b4b5d37
- SSDEEP 768:wlqX64RSJCsdb8dqf19ZIeNwI6ur4Ce+pPX6Ek1TRSD7lL2LaT4zZYjoTo:wQ64cJRL1PIo6utxZNo0lqmMVc0o
- TLSH T1E913F28AD86BB566A00A84382E6439B7F6D1B8A0C8EAD4540ECC1FDE573617B3C510DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2252 7zFM.exe Token: 35 2252 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2252 7zFM.exe