6b846d659429710ec9ee63e2108e299b03ed96abf9cb2ec24d2dd88a10b061b8

Analysis

max time kernel
148s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/06/2026, 04:35

Target
Cogmind/data/item.gz
Size 18KB
Sample260627-e7rm2sht9p
SHA256 6b846d659429710ec9ee63e2108e299b03ed96abf9cb2ec24d2dd88a10b061b8
MD5 75977f2e90d343677a9341ea4e017f32
SHA1 d415c79f631f36ecac3684b315e12925b8d8d955
SHA512 3603d7a636621f1ae7606a6cc11c657861f85672b6b6bebd307681155d0c2cb0c5885cb53e06e9e8266ea78ada1d07e2316422da6dc7fbbb69a4d625970b4e41
SSDEEP 384:W9kqqGMZ/KM+pyp/9LklBm86kpWsOYxu7vvIZk5q9TcQ44Y:Zqqmn8Lkl7QsOUuEtp/5Y
TLSH
T1AF82E087C89E3430882DC0B51021D1F2DFE7545EF570F9396E928688E38095BE2E1EE6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3668	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	3668	7zFM.exe
Token: 35	3668	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3668	7zFM.exe