Analysis
- user interaction
yes - max time kernel
149s - max time network
193s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
04/06/2026, 21:02
Static task
static1
Behavioral task
behavioral1
Sample
Steinberg Cubase Pro 15 v15.0.21-R2R.rar
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Steinberg Cubase Pro 15 v15.0.21-R2R.rar
Resource
win11-20260513-en
2 signatures
150 seconds
General
- Target Steinberg Cubase Pro 15 v15.0.21-R2R.rar
- Size 775.6MB
- Sample260604-zve4psez41
- SHA256 1c68d04abd9d43431816210f030f3168fcf3e361aec842a9a00a97e0df6d0e32
- MD5 35dfa5e63056bca93d059d758e227f30
- SHA1 3b3495ed7467133bd16c6966fe0d187e4684b217
- SHA512 0170895e1645788d29f2623afcc71af36300986d78e9858b707a3acb9bd18059586ad39d0b96bc8deb8aece51ec330909910273c3d6e78a700b00d3f189ef17c
- SSDEEP 25165824:2s1t2RtTLJJL9zzW2a9YCFe9HJpLMyeeskP/PKyJL:x4tpp9fba69Hzo/il
- TLSH T195893332E1A1D3684664D79829A31F899F07B4DCFF73AA42F85342B2C15CC1E6F61693
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4000 7zFM.exe Token: 35 4000 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4000 7zFM.exe