Analysis
- user interaction
yes - max time kernel
46s - max time network
66s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
29/07/2026, 14:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
$PLUGINSDIR/app-32.7z
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
General
- Target $PLUGINSDIR/app-32.7z
- Size 111.8MB
- Sample260729-r3xpqaaj21
- SHA256 58a03403e357a03737f2a750ad8a8eaca5ebc22b404a7c1f4c410f145d2bbf00
- MD5 b8b8bc8e5733e7f6851fca2302777adb
- SHA1 48d42bc8bb9064538f5c08492b26af5003634754
- SHA512 0d9f57356c7cfe56cf75c7a20e75212d8a82ed5857f15c22a1460a03284c989ae63510f5240164669ad99467046c1fd03f85dc1169230d593e9cdccdd50257b5
- SSDEEP 3145728:9CYVHElNoCjiED0WAW2WrW5hBCM9fbMxCDIPbO7t:sYoNoM/IWVcFFIBDC
- TLSH T1014833DE8881EF27DB04F77DB7B71E6DD1122266C4E14433A7246222534EF0B6A9E42D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4876 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4876 7zFM.exe Token: 35 4876 7zFM.exe - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 4876 7zFM.exe 4876 7zFM.exe