Analysis
- max time kernel
149s - max time network
96s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
09/09/2026, 22:36
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
message001 (16).eml
Resource
win11-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Certificate Of Creditable Withholding Tax.rar
Resource
win11-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
Users/catoma/OneDrive/Desktop/Data Encoder/Certificate Of Creditable Withholding Tax.iso
Resource
win11-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
Certificate Of Creditable Withholding Tax.exe
Resource
win11-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
email-html-2.html
Resource
win11-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral6
Sample
email-plain-1.txt
Resource
win11-20260513-en
4 signatures
150 seconds
General
- Target Certificate Of Creditable Withholding Tax.rar
- Size 596KB
- Sample260909-2jm2aabl2v
- SHA256 85a9558a51e79b208a3d8e8362ee154cd1e2c3943f08b4f2e1db5e2b0735486d
- MD5 997a51428689b971065668f8832b6c29
- SHA1 4392690393e92828c56b826d65bf6d0f6fb4dc58
- SHA512 bd3d2c7a0743e2017989a80529270c10f260b6a298144cf307354662e0281e5e5052a106e8901daaa389a12c4659f626116891220ca6ac57e182ceeca16aff26
- SSDEEP 12288:avv6rVEaEKZqeBbLy191D07gV7lWsaoFaunzR6mQgZZWN9DH:aX6vCmA07gXJn80K9DH
- TLSH T14FD423612AEDDA43D1933F2D91A340EFDDF5045513EE9F9C04E0AD9528ECBB43B68A12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4076 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4076 7zFM.exe Token: 35 4076 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4076 7zFM.exe