Analysis
- max time kernel
149s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/07/2026, 14:27
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
tmpz46smx9b.rar
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpz46smx9b.rar
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpz46smx9b.rar
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target tmpz46smx9b.rar
- Size 1.3MB
- Sample260702-rsmrrsc14n
- SHA256 1c75807bef0ced956fc92cf50a9dbc94cf50cbd09f46b2c6abdd9a622c433080
- MD5 1a06b96ce920bbc6950f9dc22b85e9de
- SHA1 6ee9d8b3611ecc2480b31060137354399c9627c0
- SHA512 63a470c3cafa2414bac15cbd1cf4e928a25018a3626131455fe46517e099a7839c2f612d240de2afdda5b86b9a3e3489c930800e993877bb05847649edab3baf
- SSDEEP 24576:dRSfrAEH9XIYpj0BErpoHYcPVQqeQEOvrO4RBcGYXqUwN/t6PFCgrPQnZyF1:dgTbH94YxB2VQqESB5fYRrPQgL
- TLSH T1F655F119E7E401F9E0B7D578CD838902E7767C491771EACF03A4A9A71F236809D3AB52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4664 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4664 7zFM.exe Token: 35 4664 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4664 7zFM.exe