1755f3b8e2b09fd7a2fac95e1af0e884f3d1e631d924331ab676fb7b7446a98e

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/06/2026, 13:03

Target
MS.rar
Size 37.4MB
Sample260625-qaf1tsct5m
SHA256 1755f3b8e2b09fd7a2fac95e1af0e884f3d1e631d924331ab676fb7b7446a98e
MD5 ab4e6fb8498f02b78e2917c10e343ce2
SHA1 1b712eb8037060d2aee49a5d7654ccfc80479fb4
SHA512 950ee9c10e422d0ea61247e1c5816f5982ae9499b005efb4c3ed2e2243edeec2810e8b2283236e0a41f98e6e9394ce7eef1881fdfec70d14e32c126749c3d732
SSDEEP 786432:0r6Fw7J/TkR+KKGt4r42CWnHnp7yZC//Mzo576bCMY4ac:26Fw7lT6+KYOWnEZC//MEaN
TLSH
T1D587336FF0FD49DB6E1257CE1F1DB7CA22BF84DB111BC94AA11A2DC6C6C89A1C120271
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3656	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	3656	7zFM.exe
Token: 35	3656	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3656	7zFM.exe