Analysis
- max time kernel
149s - max time network
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
02/08/2026, 19:43
Static task
static1
Behavioral task
behavioral1
Sample
Release.rar
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Release.rar
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target Release.rar
- Size 104KB
- Sample260802-yfph6afk7w
- SHA256 d08ffeeb86f06abc78ca6e943d710848dbee0d1ae1d235eea8db83972a59c65e
- MD5 5cca5204e191b2cb1074ae1c6fcf7ee4
- SHA1 052c0f8ccdbd7ae12128117ff755fe41a7f6234e
- SHA512 b952795f2309d8301546d8c54ff0cc32f7ac7fd706bfc7391ea2182a39142b9b6562d74df70f744730f7d83e90d79d40d430b53a5e4b74a8de0ead7c9f89c637
- SSDEEP 3072:p8PuW5CL7nt83iajT9gFhigkgiVQDHfLZFXgc:p8P4fm3DihYwDlZ
- TLSH T12BA302DABA393B9117EDE5A1B4F58D81AEB942AA1144331ECAFDF1CE40D560008FD8B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 984 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 984 7zFM.exe Token: 35 984 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 984 7zFM.exe