Analysis
- max time kernel
149s - max time network
145s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260911-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
24/10/2026, 18:11
Static task
static1
Behavioral task
behavioral1
Sample
OctopusEAX.rar
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
OctopusEAX.rar
Resource
win10ltsc2021-20260911-en
3 signatures
150 seconds
General
- Target OctopusEAX.rar
- Size 816B
- Sample261024-wssegabv7v
- SHA256 94869f193c91503c02be914fbc49b10941ea4b218721e33a789a1b06ef1a9d18
- MD5 2fd5a4e24b38b1805ed720a117c6e1c3
- SHA1 ba2f477520adb21864acfbba9f64b5e9f8553ee5
- SHA512 755ff32f502bed90d4af61403455d3fbafff0d6b43e5ab181a5a2c3adb3aaac2139952862f842a935be9b4396b9dcb325cdf6c0247af77fe7d5ca20fee183add
- TLSH T160010A8C1E40E2AD38B2A0F0623713C023C0BE7127418CF31C9E137252F8807D580CA0
- MD5 SHA1 SHA512 TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3612 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3612 7zFM.exe Token: 35 3612 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3612 7zFM.exe