Analysis
- user interaction
yes - max time kernel
898s - max time network
466s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260911-uk - resource tags
arch:x64arch:x86image:win10ltsc2021-20260911-uklocale:uk-uaos:windows10-ltsc_2021-x64systemwindows - submitted
02/11/2026, 14:57
Static task
static1
Behavioral task
behavioral1
Sample
DocNet_ Миколаївська обласна державна адміністрація _ Мик.eml
Resource
win10ltsc2021-20260911-uk
22 signatures
900 seconds
Behavioral task
behavioral2
Sample
email-plain-1.txt
Resource
win10ltsc2021-20260911-uk
0 signatures
900 seconds
Behavioral task
behavioral3
Sample
main.rar
Resource
win10ltsc2021-20260911-uk
3 signatures
900 seconds
Behavioral task
behavioral4
Sample
Список розсилки.pdf.p7s
Resource
win10ltsc2021-20260911-uk
0 signatures
900 seconds
General
- Target main.rar
- Size 349KB
- Sample261102-sb3mbsc13m
- SHA256 3bd7219d3335768462a3ec72e7957809360fbbb0b5dadd062ad885eb71aacf69
- MD5 73740e4e8ab29b58418d58dd11929ec1
- SHA1 1d0cdbae54053b5924b5c2b04cf6462a9d4c7ac1
- SHA512 c9d2aa30e075369dfeda91e4f1d2eaf4925997654fdbc46e499e600399ef87664f8213cbee7aee2fa2b8218cdd2af2d0529b6f8d9ce5ac472d09db14d9c2e732
- SSDEEP 6144:oG/mTnomMvvEgKGqHQ107LrOMP88awCIynGN/28p0J/mrmy56AEZSD:AVMYXLLrOUy9e/tpQerfD
- TLSH T1A47422190D7F3975C8683B10D6EECB424E3A883E3A38A0B381D8B9D4455F95C79D3A5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4784 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4784 7zFM.exe Token: 35 4784 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4784 7zFM.exe