Overview
overview
3Static
static
11. CCXP.xar
windows10-2004-x64
31. CCXP.xar
windows11-21h2-x64
3Bom
windows10-2004-x64
1Bom
windows11-21h2-x64
1PackageInfo
windows10-2004-x64
1PackageInfo
windows11-21h2-x64
1Payload.gz
windows10-2004-x64
1Payload.gz
windows11-21h2-x64
1Payload
windows10-2004-x64
1Payload
windows11-21h2-x64
1Scripts.gz
windows10-2004-x64
1Scripts.gz
windows11-21h2-x64
1Scripts
windows10-2004-x64
1Scripts
windows11-21h2-x64
1Analysis
- max time kernel
149s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
05/06/2026, 03:26
Static task
static1
Behavioral task
behavioral1
Sample
1. CCXP.xar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
1. CCXP.xar
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
Bom
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Bom
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
PackageInfo
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
PackageInfo
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
Payload.gz
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Payload.gz
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
Payload
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Payload
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
Scripts.gz
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Scripts.gz
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
Scripts
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Scripts
Resource
win11-20260513-en
General
- Target Payload.gz
- Size 80B
- Sample260605-dzesvaby6m
- SHA256 234de63ed20b1fbc1ef783daaca36feb22ede319cb831645a5169e249894e27d
- MD5 f8baf464f75569e035a05c742500c95f
- SHA1 0fd43d16a6b23cc3c2e7132cc7626c27a5ff4706
- SHA512 e72bacc6e2e6e2382c64963eb80b436d24b53cbc4c21511a249721e3a05c1a3ee8948cd4f44c5ed17cc187d504aebd170ebaf74bc7ade19bc1969c92c8b12dfa
- TLSH T15DA012E6521500BCEC52247041893200400F344B8C1452240801A44700C5D0B1041A16
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2528 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2528 7zFM.exe Token: 35 2528 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2528 7zFM.exe