Analysis
- max time kernel
898s - max time network
429s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
15/04/2026, 22:33
Static task
static1
Behavioral task
behavioral1
Sample
Riva-s C2 internel V2.rar
Resource
win10v2004-20260130-en
34 signatures
900 seconds
Behavioral task
behavioral2
Sample
Riva-s C2 internel V2.rar
Resource
win11-20260130-en
3 signatures
900 seconds
General
- Target Riva-s C2 internel V2.rar
- Size 1.1MB
- Sample260415-2glensbs9n
- SHA256 ca180feb4743e60a5ae52e4543be645b986dfbb0cc9f05e5f8e1a38e2483922d
- MD5 01e87a168fd5b45ae2466fbc63cb9d10
- SHA1 ef86b877e1a6cac20d831c5725c8051b527166cd
- SHA512 2797d8fd874cfd87d949151d264a9da0511efe77b8f9953dc602944c3a8b751434087a21d3e1c482442f3cf2b1ee472144728839a245644f7b89c1dac852c3e4
- SSDEEP 24576:pwI1uKl1KVjMIQMB7jin8NlabeiyMnBYL7g0XAWuqG:pwIfqjdQsC8rldMnBYL7hXAWuqG
- TLSH T14045335E38392B12C108D41677E924EC74DE1D0ACCACE30B6BE53531BD69A3DC589EE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1304 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1304 7zFM.exe Token: 35 1304 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1304 7zFM.exe