Overview
overview
7Static
static
3privateAss....4.exe
windows11-21h2-x64
7$PLUGINSDI...er.dll
windows11-21h2-x64
3$PLUGINSDI...ls.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDI...ll.dll
windows11-21h2-x64
3$PLUGINSDIR/app-32.7z
windows11-21h2-x64
1privateAss...er.exe
windows11-21h2-x64
4resources/elevate.exe
windows11-21h2-x64
3vk_swiftshader.dll
windows11-21h2-x64
3vulkan-1.dll
windows11-21h2-x64
3$PLUGINSDIR/app-64.7z
windows11-21h2-x64
1LICENSES.c...m.html
windows11-21h2-x64
4d3dcompiler_47.dll
windows11-21h2-x64
1ffmpeg.dll
windows11-21h2-x64
1libEGL.dll
windows11-21h2-x64
1libGLESv2.dll
windows11-21h2-x64
1privateAss...er.exe
windows11-21h2-x64
4resources/elevate.exe
windows11-21h2-x64
3vk_swiftshader.dll
windows11-21h2-x64
1vulkan-1.dll
windows11-21h2-x64
1$PLUGINSDI...m64.7z
windows11-21h2-x64
1LICENSES.c...m.html
windows11-21h2-x64
4d3dcompiler_47.dll
windows11-21h2-x64
1ffmpeg.dll
windows11-21h2-x64
1libEGL.dll
windows11-21h2-x64
1libGLESv2.dll
windows11-21h2-x64
1privateAss...er.exe
windows11-21h2-x64
resources/elevate.exe
windows11-21h2-x64
3vk_swiftshader.dll
windows11-21h2-x64
1$PLUGINSDI...ec.dll
windows11-21h2-x64
3$PLUGINSDI...7z.dll
windows11-21h2-x64
3$R0/Uninst...er.exe
windows11-21h2-x64
7Analysis
- max time kernel
149s - max time network
161s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
03/06/2026, 22:24
Static task
static1
Behavioral task
behavioral1
Sample
privateAssetDownloader-Setup-1.1.4.exe
Resource
win11-20260513-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/SpiderBanner.dll
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/WinShell.dll
Resource
win11-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/app-32.7z
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
privateAssetDownloader.exe
Resource
win11-20260513-en
Behavioral task
behavioral8
Sample
resources/elevate.exe
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
vk_swiftshader.dll
Resource
win11-20260513-en
Behavioral task
behavioral10
Sample
vulkan-1.dll
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/app-64.7z
Resource
win11-20260513-en
Behavioral task
behavioral12
Sample
LICENSES.chromium.html
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
d3dcompiler_47.dll
Resource
win11-20260513-en
Behavioral task
behavioral14
Sample
ffmpeg.dll
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
libEGL.dll
Resource
win11-20260513-en
Behavioral task
behavioral16
Sample
libGLESv2.dll
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
privateAssetDownloader.exe
Resource
win11-20260513-en
Behavioral task
behavioral18
Sample
resources/elevate.exe
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
vk_swiftshader.dll
Resource
win11-20260513-en
Behavioral task
behavioral20
Sample
vulkan-1.dll
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/app-arm64.7z
Resource
win11-20260513-en
Behavioral task
behavioral22
Sample
LICENSES.chromium.html
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
d3dcompiler_47.dll
Resource
win11-20260513-en
Behavioral task
behavioral24
Sample
ffmpeg.dll
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
libEGL.dll
Resource
win11-20260513-en
Behavioral task
behavioral26
Sample
libGLESv2.dll
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
privateAssetDownloader.exe
Resource
win11-20260513-en
Behavioral task
behavioral28
Sample
resources/elevate.exe
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
vk_swiftshader.dll
Resource
win11-20260513-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11-20260513-en
Behavioral task
behavioral31
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win11-20260513-en
Behavioral task
behavioral32
Sample
$R0/Uninstall privateAssetDownloader.exe
Resource
win11-20260513-en
General
- Target $PLUGINSDIR/app-64.7z
- Size 77.4MB
- Sample260603-2bt5maez21
- SHA256 b41f02e05caccff98f3577d50ad2f65adecfc98fea701c79fc3a0409dfdae8d9
- MD5 1b7c5433405024aab29761644735455b
- SHA1 5681c35263c6d9cf1924ce08da30bb0126bcd659
- SHA512 1ebea618a5ccb8bb075c352f88602fed12d375641bcf58f9c1747384e6365dcd87f47d10784f6a5881e23ee6809c8a69fa40a8eb9043229d5bef6596effe5162
- SSDEEP 1572864:X2/TWaVvq/5s9sc9TI0p7+/gA+FzdN6V9jWltoN:4VAsM2i/gtd3s9jhN
- TLSH T1CC08335807C8CA1AA1968C3F3EFFA36190B01A2B9344B94B57BDDF5793985FD54380A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5272 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 5272 7zFM.exe Token: 35 5272 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5272 7zFM.exe