Analysis
- max time kernel
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
06/06/2026, 19:57
Static task
static1
Behavioral task
behavioral1
Sample
Skid.cc.rar
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Skid.cc.rar
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target Skid.cc.rar
- Size 83.0MB
- Sample260606-yn8a8scv2l
- SHA256 52d5b8da2f238bad1d21f965b9fe00434a71715138ad314dc342e53ad2cc2d4f
- MD5 84cdf8b210bffe7f51d440f6d6d7d288
- SHA1 060d4eba8ad447f1e510af512302705d1c47b0a2
- SHA512 c272c4ec44bb137ddc6faf64f5a00a5ba0bc9959be2d360384dcab67bdae78469448ebf36597d44e5df50441645beaa941e5baa5cb28a5e655f3d9496f6e1303
- SSDEEP 1572864:jjic23BHpQzixT+o4VNHlOEi1agdUTrKlaFCirWuKcSMxcNm7ID:jWcIJQeqoUp4PEgmTrKlSfFtrcNKq
- TLSH T10B1833905E1FD2B0A84474D267FB89EA3159388B87F91FD3F49272AD12D468D3CDE818
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2704 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2704 7zFM.exe Token: 35 2704 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2704 7zFM.exe