Overview
overview
3Static
static
3HOTMAIL.rar
windows10-2004-x64
1HOTMAIL.rar
windows11-ltsc_2024-x64
1libs/Crypt...2b.dll
windows10-2004-x64
1libs/Crypt...2b.dll
windows11-ltsc_2024-x64
1libs/Crypt...2s.dll
windows10-2004-x64
1libs/Crypt...2s.dll
windows11-ltsc_2024-x64
1libs/Crypt...D2.dll
windows10-2004-x64
1libs/Crypt...D2.dll
windows11-ltsc_2024-x64
1libs/Crypt...14.pyc
windows10-2004-x64
3libs/Crypt...14.pyc
windows11-ltsc_2024-x64
3libs/Crypt...14.pyc
windows10-2004-x64
3libs/Crypt...14.pyc
windows11-ltsc_2024-x64
3libs/Crypt...14.pyc
windows10-2004-x64
3libs/Crypt...14.pyc
windows11-ltsc_2024-x64
3libs/Crypt...14.pyc
windows10-2004-x64
3libs/Crypt...14.pyc
windows11-ltsc_2024-x64
3libs/Crypt...14.pyc
windows10-2004-x64
3libs/Crypt...14.pyc
windows11-ltsc_2024-x64
3libs/Crypt...56.pyi
windows10-2004-x64
3libs/Crypt...56.pyi
windows11-ltsc_2024-x64
3libs/Crypt...DF.pyi
windows10-2004-x64
3libs/Crypt...DF.pyi
windows11-ltsc_2024-x64
3libs/Crypt...ng.pyi
windows10-2004-x64
3libs/Crypt...ng.pyi
windows11-ltsc_2024-x64
3libs/Crypt...__.pyi
windows10-2004-x64
3libs/Crypt...__.pyi
windows11-ltsc_2024-x64
3libs/Crypt...SA.pyi
windows10-2004-x64
3libs/Crypt...SA.pyi
windows11-ltsc_2024-x64
3libs/Crypt...CC.pyi
windows10-2004-x64
3libs/Crypt...CC.pyi
windows11-ltsc_2024-x64
3libs/Crypt...al.pyi
windows10-2004-x64
3libs/Crypt...al.pyi
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
09/08/2026, 00:05
Static task
static1
Behavioral task
behavioral1
Sample
HOTMAIL.rar
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
HOTMAIL.rar
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
libs/Crypto/Hash/_BLAKE2b.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
libs/Crypto/Hash/_BLAKE2b.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
libs/Crypto/Hash/_BLAKE2s.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
libs/Crypto/Hash/_BLAKE2s.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
libs/Crypto/Hash/_MD2.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
libs/Crypto/Hash/_MD2.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
libs/Crypto/Hash/__pycache__/BLAKE2b.cpython-314.pyc
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
libs/Crypto/Hash/__pycache__/BLAKE2b.cpython-314.pyc
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
libs/Crypto/Hash/__pycache__/BLAKE2s.cpython-314.pyc
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
libs/Crypto/Hash/__pycache__/BLAKE2s.cpython-314.pyc
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
libs/Crypto/Hash/__pycache__/CMAC.cpython-314.pyc
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
libs/Crypto/Hash/__pycache__/CMAC.cpython-314.pyc
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
libs/Crypto/Hash/__pycache__/HMAC.cpython-314.pyc
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
libs/Crypto/Hash/__pycache__/HMAC.cpython-314.pyc
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
libs/Crypto/Hash/__pycache__/KMAC128.cpython-314.pyc
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
libs/Crypto/Hash/__pycache__/KMAC128.cpython-314.pyc
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
libs/Crypto/Hash/cSHAKE256.pyi
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
libs/Crypto/Hash/cSHAKE256.pyi
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
libs/Crypto/Protocol/KDF.pyi
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
libs/Crypto/Protocol/KDF.pyi
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
libs/Crypto/Protocol/SecretSharing.pyi
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
libs/Crypto/Protocol/SecretSharing.pyi
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
libs/Crypto/Protocol/__init__.pyi
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
libs/Crypto/Protocol/__init__.pyi
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
libs/Crypto/PublicKey/DSA.pyi
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
libs/Crypto/PublicKey/DSA.pyi
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
libs/Crypto/PublicKey/ECC.pyi
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
libs/Crypto/PublicKey/ECC.pyi
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
libs/Crypto/PublicKey/ElGamal.pyi
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
libs/Crypto/PublicKey/ElGamal.pyi
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
General
- Target HOTMAIL.rar
- Size 13.7MB
- Sample260809-adbmhser5s
- SHA256 95001f88c8ad8290615039c6ad42572e911023d7e438456d7fafb3680c912300
- MD5 6ba796eb821b11a25ba52a08ff2a0284
- SHA1 4538e9125a17e67d313560574ba7ae7bdb293714
- SHA512 d036cb9821fefb4fa2842cc913825078a0ee2b58616131f46683d7bbcf3b3cf6a9b52aa3cf537d4874bf01b60732570dcb8bd9edc4a787784be595d28201a772
- SSDEEP 393216:cMqPwgkbXSpoC4SKOL1iOJS/BkDch8fw0oplEa:1TrSpoC4SKOpPSpk9LoplEa
- TLSH T186E633784FFF1562FC6E167567A2CB1F800F97813159D94A2B2C399FC8E218A578F602
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4004 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4004 7zFM.exe Token: 35 4004 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4004 7zFM.exe