569a2f4726c60a7d2a857b5ed2de9f743c11aa4d765c4ae56b7eb193c1c177da

Resubmissions

22/06/2026, 08:59

22/06/2026, 08:57

max time kernel
899s
max time network
502s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/06/2026, 08:57

Target
DBDCheat_.7z
Size 8.3MB
Sample260622-kw4fcsa19t
SHA256 569a2f4726c60a7d2a857b5ed2de9f743c11aa4d765c4ae56b7eb193c1c177da
MD5 263217faef4798be6501abc155399f53
SHA1 dcc53b72aceacdbe0af6ddc13caac7edf369b02d
SHA512 30c736709d94ab08dc5ec24682e2f1792bbc61331ad585e14b8656f7c2a359e663bd925b9643e464cc3de89e7f064f638ef6c2b4f5177a2679a6b68f2070e27d
SSDEEP 196608:udh+0qSb5WcvBp/wiLUD5cHVMGrm/J4NNuJ3BxpRH:uuNxmBpIiYV4VM8mR4+xT
TLSH
T1749633A1C0C333C38637969D3A33CFF5B425611848491D95D6BBC8CAABFB476275928E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
772	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	772	7zFM.exe
Token: 35	772	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
772	7zFM.exe

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4844

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:3100