Analysis
- max time kernel
598s - max time network
519s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
13/09/2026, 11:44
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
w.w.w.drrrb.com.rar
Resource
win10v2004-20260911-en
3 signatures
600 seconds
Behavioral task
behavioral2
Sample
w.w.w.drrrb.com.rar
Resource
win11ltsc2024-20260911-en
15 signatures
600 seconds
General
- Target w.w.w.drrrb.com.rar
- Size 1.5MB
- Sample260913-nwbbcsaf37
- SHA256 d272f3bd372c826f620da84c4ecdbd950c600d90c4cc21ec2aeedb9d1637f350
- MD5 2e0c3bd63f956d760133b0ab428fc2e4
- SHA1 a9b47e6829608ebbdafc6c9cb26638398116aeef
- SHA512 87143b1122512e6cf92da7fe27ec5fd29be1f6579480ce0a7ace40a7ae9b84e7ab23c4ea43c49a3bcb8cf99ada74b67c6fc6e7e591ccc67b8924c8d00bd8e02c
- SSDEEP 24576:fTXBQhD7JjtyC6x5rU5uvV2GND0HolCTm62Mgh/wt28yjkHMxAnkGIb7+45:fT27kj4UDGolW2MgJweg6mIbp5
- TLSH T1107533A674E7F1AE092E97A45E5398BC778DC18DC3D876D04D9FF178B84148C700E2AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1440 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1440 7zFM.exe Token: 35 1440 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1440 7zFM.exe