Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/06/2026, 08:46
Static task
static1
Behavioral task
behavioral1
Sample
HPP_v6_by_ArabeCS.rar
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
HPP_v6_by_ArabeCS.rar
Resource
win11ltsc2024-20260618-en
4 signatures
150 seconds
General
- Target HPP_v6_by_ArabeCS.rar
- Size 1.7MB
- Sample260627-kpeteshx2s
- SHA256 2a631ad1a74612accc27fd4874d21dd7b27cb13dddee1f826ae40a48f8bccc5d
- MD5 9fb3d3bae4390e527b462a6386b951e6
- SHA1 caeb08b9fef3b242682107a36ab11b123461fcff
- SHA512 5fe0fd95d868d602063c950de66b8e639bbc941d9bf33f76dde6bf1ba49fc79e2f383517ce80329b93be1e7481fcf2d36a726b79fbe3bbfa1851e213aa7c10a2
- SSDEEP 49152:3FYIJg4unJ0K3StI470twKq3D6furjtVCovL6xCJeEb5:3Fs4IJza3SuH3C50x
- TLSH T1278533789C72EA123710BABD7C8743B6D5CC85E6EC4827E975930DF1A8AF3445847E82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4052 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4052 7zFM.exe Token: 35 4052 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4052 7zFM.exe