Analysis
- max time kernel
298s - max time network
177s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
13/09/2026, 11:40
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Debug1.rar
Resource
win10v2004-20260911-en
3 signatures
300 seconds
Behavioral task
behavioral2
Sample
Debug1.rar
Resource
win11ltsc2024-20260911-en
8 signatures
300 seconds
General
- Target Debug1.rar
- Size 1.3MB
- Sample260913-ntb5waysct
- SHA256 238d3ad786fbf0c8b557f22c8a655d44e5e80e296bb562bca58bec9df7757643
- MD5 034f17eec2fbeb5ba3bfc2d4b99958cc
- SHA1 37cd95c8e63caee4bb57da1826d66417c2f78b8f
- SHA512 e2d67c036bbbce1254cf05c9c14c315bff2e9c3a7f0f07c37b51fd98ad809e37e0b2aeaa72d7c43b8b0eab04c1ad4d534ad3121bcb1b147fd42ecc4fe61ebb33
- SSDEEP 24576:PSxzgX1anINBJfDt2r+5C1mdQlCTm62Mgh/wt28yjkHMxAnkGIVU+4i:6xzgXIID0+alW2MgJweg6mIVii
- TLSH T1A655337530F1F31E0E160574EA97E864B52DF0AD90E0B4D2B8BBE2B66D86E09310656E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5104 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 5104 7zFM.exe Token: 35 5104 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5104 7zFM.exe