Analysis
- max time kernel
298s - max time network
287s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-de - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-delocale:de-deos:windows10-ltsc_2021-x64systemwindows - submitted
05/09/2026, 14:35
Behavioral task
behavioral1
Sample
net462(1).rar
Resource
win10v2004-20260513-de
7 signatures
300 seconds
Behavioral task
behavioral2
Sample
net462(1).rar
Resource
win10ltsc2021-20260513-de
3 signatures
300 seconds
General
- Target net462(1).rar
- Size 10.7MB
- Sample260905-rx47lswhkh
- SHA256 742b18b66ac504d80759a2a20629545425e38959979ab26e20858ae683bda91d
- MD5 51a9b9215cc23190446c065a5676628d
- SHA1 a5f80b056d7098291a4fdd2ed18add7c2779406e
- SHA512 2503e223a0d8d03fd83c37105186c49e143b31f85595d171d8dd3f40fb2d6211bbcc83189c8f2bd3a22d66491aa5c451e16d52d19736409cf66107240b4e4afe
- SSDEEP 196608:awDE1Drs6uNL/sGsie+kYuwDE1Drs6uNL/sGsie+kYEqgrkVAvnM8PY+zHjijqDE:VE1fs6uNL/YifE1fs6uNL/YiPok2nXTe
- TLSH T11CB63395E7CEA225C6C390DA8D6FA140B19234ECEE2D234D7ABC0E2FE26D15781535F1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4848 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4848 7zFM.exe Token: 35 4848 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4848 7zFM.exe