Analysis
- user interaction
yes - max time kernel
179s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
19/10/2026, 16:17
Static task
static1
Behavioral task
behavioral1
Sample
8888888888888888888.7z
Resource
win10v2004-20260911-en
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
8888888888888888888.7z
Resource
win11ltsc2024-20260911-en
9 signatures
900 seconds
General
- Target 8888888888888888888.7z
- Size 15.3MB
- Sample261019-tre2mswt2l
- SHA256 04d609ff1f7acc93cddf3891292d40d3d304042500b16829092841d365c4cee5
- MD5 817ddb51d3d914490f8443868968520b
- SHA1 bd1a0a3dc71e7fc6c54e6db1cce95844a5578530
- SHA512 93f1cc8789250934c1e7c93f7c7657402059798492e95ba47346a2fd4649b4671d19f2424655985378563c99886a86b13b5cb8c3e07159060d365b848d966271
- SSDEEP 393216:lVDGeDyoHIw3GyvbqGE8GvPW/Cbh40nM7a2rhewmZgb7Q:lxxdHIwFjpE9nWuhpM7a2rhew7vQ
- TLSH T10FF63331EE41FF06844465C352EF2E08B91B7E61EF0D6833A3D9554FC2CA7A348A56E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1484 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1484 7zFM.exe Token: 35 1484 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1484 7zFM.exe