Analysis
- max time kernel
148s - max time network
123s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
19/06/2026, 20:03
Behavioral task
behavioral1
Sample
Xotmail - Hotmail Brute Checker.rar
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Xotmail - Hotmail Brute Checker.rar
Resource
win11ltsc2024-20260618-en
3 signatures
150 seconds
General
- Target Xotmail - Hotmail Brute Checker.rar
- Size 4.1MB
- Sample260619-ysw4rsbs8q
- SHA256 488568106b52122b7887e248325ba0b51d3333f03768e86dc51b0bfb47dd527e
- MD5 090e21a8c617a0c4efa2793bad0280bf
- SHA1 ae29d5624fc7b7c5c853b51867769d036a2cbdc7
- SHA512 cef254d0d1c4bba6c668f72cf3538119f241314919adc8cfcb13552ca77d431fd7769a34a253db3620d327d68812b34d81a65c2f480ce169aae974fca844bbba
- SSDEEP 98304:evYpO+gau79m83ciZtIPz1Bb8ajj775QiuQ4TWlOxpI/+8rbDblN:evYpqpm8Mi3I71v5GRp4Xz
- TLSH T1431633AEB752E2C328CC57E1781E1E8F80D963247B07EF1444C37699CF4DE4AA49DA64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2968 7zFM.exe Token: 35 2968 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2968 7zFM.exe