Overview
overview
9Static
static
9disco.rar
windows10-2004-x64
1disco.rar
windows11-21h2-x64
1disco/readme.txt
windows10-2004-x64
1disco/readme.txt
windows11-21h2-x64
3disco/readme2.md
windows10-2004-x64
3disco/readme2.md
windows11-21h2-x64
3disco/smsniff.cfg
windows10-2004-x64
3disco/smsniff.cfg
windows11-21h2-x64
3disco/smsniff.chm
windows10-2004-x64
1disco/smsniff.chm
windows11-21h2-x64
1disco/smsniff.exe
windows10-2004-x64
9disco/smsniff.exe
windows11-21h2-x64
9out.exe
windows10-2004-x64
out.exe
windows11-21h2-x64
3disco/smsniff_lng.ini
windows10-2004-x64
1disco/smsniff_lng.ini
windows11-21h2-x64
3Analysis
- max time kernel
598s - max time network
386s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
02/06/2026, 07:18
Behavioral task
behavioral1
Sample
disco.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
disco.rar
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
disco/readme.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
disco/readme.txt
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
disco/readme2.md
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
disco/readme2.md
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
disco/smsniff.cfg
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
disco/smsniff.cfg
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
disco/smsniff.chm
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
disco/smsniff.chm
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
disco/smsniff.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
disco/smsniff.exe
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
out.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
out.exe
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
disco/smsniff_lng.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
disco/smsniff_lng.ini
Resource
win11-20260513-en
General
- Target disco.rar
- Size 94KB
- Sample260602-h43spahs2j
- SHA256 004d425c8dd62c1220cbe269e265a73c359b05ba7dd525f0bc344759cd872c99
- MD5 68d1d4400565b83b6b3ab1ef1d612cc6
- SHA1 c2bdd429967ed98da6a6f5277107169318aaa3cf
- SHA512 ec83dae20941571b73960b715927126085264166d45803afdbea061a7fc91b3f8798796a6694160fc40bcf658807c724235f0feed9513be08849885c3b2b5c8f
- SSDEEP 1536:PrWHk1SWfzV67PWkldjUenIqJpVEjVKBEa9rxxQ2H8qgoMYl4G1yo23aCU7hxC/o:PKtWfzuWkgUIJVKztQ+8qMGwo23av7qQ
- TLSH T1649312D1FE969D5BCA5D8423B05E0B3B1CDB10DE4CF34078E463DA6662806DE86B88F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3824 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3824 7zFM.exe Token: 35 3824 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3824 7zFM.exe