Overview
overview
10Static
static
141139fff-4...4a.eml
windows10-2004-x64
141139fff-4...4a.eml
windows11-ltsc_2024-x64
10ThaiHC0020...026.7z
windows10-2004-x64
1ThaiHC0020...026.7z
windows11-ltsc_2024-x64
8ThaiHC0020...026.js
windows10-2004-x64
10ThaiHC0020...026.js
windows11-ltsc_2024-x64
10email-html-2.html
windows10-2004-x64
3email-html-2.html
windows11-ltsc_2024-x64
3email-plain-1.txt
windows10-2004-x64
1email-plain-1.txt
windows11-ltsc_2024-x64
8image009.jpg
windows10-2004-x64
1image009.jpg
windows11-ltsc_2024-x64
1Analysis
- max time kernel
598s - max time network
437s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
08/10/2026, 13:32
Static task
static1
Behavioral task
behavioral1
Sample
41139fff-4912-56e2-8992-2839448c2a4a.eml
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
41139fff-4912-56e2-8992-2839448c2a4a.eml
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
ThaiHC00202608102026.7z
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
ThaiHC00202608102026.7z
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
ThaiHC00202608102026.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
ThaiHC00202608102026.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
email-html-2.html
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
email-html-2.html
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
email-plain-1.txt
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
email-plain-1.txt
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
image009.jpg
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
image009.jpg
Resource
win11ltsc2024-20260911-en
General
- Target ThaiHC00202608102026.7z
- Size 1.1MB
- Sample261008-qs5rxafa83
- SHA256 dd4f17b26e1557a7a81315204eb2518adb6374922c7cdc18a0a4164338e5b453
- MD5 4073ee90fdfecc63ec7edc0dea137127
- SHA1 86611ce124d525bdea72aa9485506fbfc35aa888
- SHA512 a3083598d22a205f9f0e4535b7fdec30a8f14eced67abe1ee72e9f931992b9b22c7cf4a32e8b97b5748c31d31633d7e461ac5262ce579c6980d89aedcaf2ac21
- SSDEEP 24576:GKg+IpluCDCnciOIi8E16aGTdnIBP5snRz629OK7q:GnluCDp8E16a2IBsRdzO
- TLSH T1D235336BE41063AEF03BC25529F44325E3940B536D8FBCADC8577981B237437AE9CA58
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4036 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4036 7zFM.exe Token: 35 4036 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4036 7zFM.exe