Overview
overview
3Static
static
11. CCXP.xar
windows10-2004-x64
31. CCXP.xar
windows11-21h2-x64
3Bom
windows10-2004-x64
1Bom
windows11-21h2-x64
1PackageInfo
windows10-2004-x64
1PackageInfo
windows11-21h2-x64
1Payload.gz
windows10-2004-x64
1Payload.gz
windows11-21h2-x64
1Payload
windows10-2004-x64
1Payload
windows11-21h2-x64
1Scripts.gz
windows10-2004-x64
1Scripts.gz
windows11-21h2-x64
1Scripts
windows10-2004-x64
1Scripts
windows11-21h2-x64
1Analysis
- max time kernel
149s - max time network
153s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
05/06/2026, 03:26
Static task
static1
Behavioral task
behavioral1
Sample
1. CCXP.xar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
1. CCXP.xar
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
Bom
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Bom
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
PackageInfo
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
PackageInfo
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
Payload.gz
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Payload.gz
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
Payload
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Payload
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
Scripts.gz
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Scripts.gz
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
Scripts
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Scripts
Resource
win11-20260513-en
General
- Target Scripts.gz
- Size 108.6MB
- Sample260605-dzesvaby6m
- SHA256 958eac6493b25caf75a5fa2f1807ce0c6cb083fb9cf9e5f1aa7491e4bed2ea03
- MD5 378a192fc25fb8ca644f7d28a8a5b9aa
- SHA1 14f25ba218aacabde61cfe14c33c629e5fac64d9
- SHA512 ba28d04db45bfa35803517665c240b474e1a8c4f08730d5ef4e5c103b7ed51bc9d0a08ecba645c007a832dd74c1c2f7b098a51942c3adfed0faa6af60cc13c50
- SSDEEP 3145728:kP7Bwzr+Q0O7CLQc54IaD2oluIqdgcfWKkj7Z9H2AVN:kP72zKbO2L2DBuB+c67Z9jN
- TLSH T1FA4833D487167DA4AFFAF1A1CF5193CC2B6976E112848C38FEA6B32481EC4435457A8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5096 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 5096 7zFM.exe Token: 35 5096 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5096 7zFM.exe