Overview
overview
9Static
static
3executo.rar
windows10-2004-x64
1executo.rar
windows11-ltsc_2024-x64
1load/load.exe
windows10-2004-x64
9load/load.exe
windows11-ltsc_2024-x64
9$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...er.dll
windows11-ltsc_2024-x64
8$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows11-ltsc_2024-x64
3$PLUGINSDIR/app-64.7z
windows10-2004-x64
1$PLUGINSDIR/app-64.7z
windows11-ltsc_2024-x64
1LICENSE.electron.txt
windows10-2004-x64
1LICENSE.electron.txt
windows11-ltsc_2024-x64
1chrome_100...nt.pak
windows10-2004-x64
3chrome_100...nt.pak
windows11-ltsc_2024-x64
3chrome_200...nt.pak
windows10-2004-x64
3chrome_200...nt.pak
windows11-ltsc_2024-x64
3icudtl.dat
windows10-2004-x64
3icudtl.dat
windows11-ltsc_2024-x64
8locales/am.pak
windows10-2004-x64
3locales/am.pak
windows11-ltsc_2024-x64
3locales/ar.pak
windows10-2004-x64
3locales/ar.pak
windows11-ltsc_2024-x64
8locales/bg.pak
windows10-2004-x64
3locales/bg.pak
windows11-ltsc_2024-x64
8locales/bn.pak
windows10-2004-x64
3locales/bn.pak
windows11-ltsc_2024-x64
3locales/ca.pak
windows10-2004-x64
3locales/ca.pak
windows11-ltsc_2024-x64
3Analysis
- max time kernel
118s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/06/2026, 05:48
Static task
static1
Behavioral task
behavioral1
Sample
executo.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
executo.rar
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
load/load.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
load/load.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/SpiderBanner.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/SpiderBanner.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/WinShell.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/WinShell.dll
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/app-64.7z
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/app-64.7z
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral15
Sample
LICENSE.electron.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
LICENSE.electron.txt
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral17
Sample
chrome_100_percent.pak
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
chrome_100_percent.pak
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral19
Sample
chrome_200_percent.pak
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
chrome_200_percent.pak
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral21
Sample
icudtl.dat
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
icudtl.dat
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral23
Sample
locales/am.pak
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
locales/am.pak
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral25
Sample
locales/ar.pak
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
locales/ar.pak
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral27
Sample
locales/bg.pak
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
locales/bg.pak
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral29
Sample
locales/bn.pak
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
locales/bn.pak
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral31
Sample
locales/ca.pak
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
locales/ca.pak
Resource
win11ltsc2024-20260618-en
General
- Target executo.rar
- Size 57.9MB
- Sample260624-ghkvbaas91
- SHA256 0af995897d4592eb9cc2e1f19e7f51cf7faa20a58c7e13c68f076b73523c1bfd
- MD5 9cc148911221457d9a5d2a5eda05d999
- SHA1 c2cf74f241cff0fe58d55623af65f98e1f52ddbb
- SHA512 53065015140b8909cd537f659323a193b4eccbc0b3902889b7ba005f40e2549922273dfd3b2274d27326581b332f59541a654198c4957d6a98cbaebb2abaa85f
- SSDEEP 1572864:WTHVXTa8v2vtZQ4hwSR9oL7fxnsBFX29g9stfXJuj:WbVDa8v2vPQ4htR+fxdbk
- TLSH T1F5D733C13A68A90EEFD513BC358980FD8C9DEB6A30D0ED173F0799ACA1578D5D85C2A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4272 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4272 7zFM.exe Token: 35 4272 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4272 7zFM.exe