Analysis
- max time kernel
149s - max time network
122s - platform
windows11-21h2_x64 - resource
win11-20260911-en - resource tags
arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
04/11/2026, 16:51
Static task
static1
Behavioral task
behavioral1
Sample
3DSeriesGG116.1.0Setup (1).rar
Resource
win10ltsc2021-20260911-en
41 signatures
150 seconds
Behavioral task
behavioral2
Sample
3DSeriesGG116.1.0Setup (1).rar
Resource
win11-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
3DSeriesGG116.1.0Setup (1).rar
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
General
- Target 3DSeriesGG116.1.0Setup (1).rar
- Size 403.7MB
- Sample261104-vdaqfaea43
- SHA256 cf1e8c47e318fe077dc1f19a3e72f6bc380dc445574e0868006648acbcddfdce
- MD5 fa7d82c78eb5f62ee05d4589c853cabd
- SHA1 e37abbfec6c22c26d52c36b6a85595db31e92172
- SHA512 4de40a398f6b49d628199a7a05900e7897ed18eda1504fed13d4deeb53bfa388017468181b84a38d755545f3a81c155e497ea69a940d2bb09687853db2369c14
- SSDEEP 12582912:FMCPNZSsP+pG9GLU0l1cC4YZQPHFPl1Gg:FMCDSQamlPlR
- TLSH T13E193344EBA86D4564002867929C7CAF9FBDDE1C4B7290FA825241C4F175BE325FF8E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3188 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3188 7zFM.exe Token: 35 3188 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3188 7zFM.exe