Overview
overview
3Static
static
3cREATIVE 2.rar
windows10-2004-x64
1cREATIVE 2.rar
windows11-21h2-x64
1cREATIVE 2...gs.exe
windows10-2004-x64
1cREATIVE 2...gs.exe
windows11-21h2-x64
1cREATIVE 2...64.dll
windows10-2004-x64
1cREATIVE 2...64.dll
windows11-21h2-x64
1cREATIVE 2/a.png
windows10-2004-x64
1cREATIVE 2/a.png
windows11-21h2-x64
cREATIVE 2/c.png
windows10-2004-x64
1cREATIVE 2/c.png
windows11-21h2-x64
Analysis
- max time kernel
58s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
01/06/2026, 15:36
Static task
static1
Behavioral task
behavioral1
Sample
cREATIVE 2.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
cREATIVE 2.rar
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
cREATIVE 2/Creative EAX Settings.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
cREATIVE 2/Creative EAX Settings.exe
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
cREATIVE 2/VoicemeeterRemote64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
cREATIVE 2/VoicemeeterRemote64.dll
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
cREATIVE 2/a.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
cREATIVE 2/a.png
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
cREATIVE 2/c.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
cREATIVE 2/c.png
Resource
win11-20260513-en
General
- Target cREATIVE 2.rar
- Size 35.9MB
- Sample260601-s2chtsay5k
- SHA256 5dfcea534aad4165a81483a29eb7d99ce5090c77f0e7a37429a1d07b773038e7
- MD5 6436327ff232fc19c610bf7c24a28239
- SHA1 fb561ecff5e1eff126796f857c8f36bbf5bb12cd
- SHA512 e458b9065c67a1fac5692e7f1ca98c9e6180840c0b03a9034d5b2fcf684ed4fede9dafecb8fcc924111faa02417bf124bcf6c78cda6d24c2b1235eaed98ff7d7
- SSDEEP 786432:APM74y0nhhopDZm5ROoD3rg/ZbHFTIWwHuWBcKyrhQ6jGlGdxpmkUK7EYn:APM8yg8TmbOi3rg/Zbl8JHuWZyrSlGdx
- TLSH T1FD8733FE28DCC592BFF277B9B12805E201AD223599A2ACC613CBD0172F6B72495D7D10
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 984 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 984 7zFM.exe Token: 35 984 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 984 7zFM.exe