Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/06/2026, 16:38
Static task
static1
Behavioral task
behavioral1
Sample
Xtras pot base.gz
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Xtras pot base.gz
Resource
win11ltsc2024-20260618-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
Xtras pot base.litematic
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
Xtras pot base.litematic
Resource
win11ltsc2024-20260617-en
3 signatures
150 seconds
General
- Target Xtras pot base.gz
- Size 16KB
- Sample260627-t5mnmsby2y
- SHA256 31e07032250ffa065a62add8bb41528d6d065aade4e9d1ae099bd56ce6839bbf
- MD5 1095fe6d3920dca65f20c37b6219bf40
- SHA1 b05fa9699f9d482098c361faecb9ab3a7b70818e
- SHA512 b91d2572bd3dfd5bd13fdef33f7f3d5b5251b763780a532c9259168d8a09bb0869101832b6130fc67e9c6b66d32911992082d5e1c2b9897ea82f5f64bb27d3c3
- SSDEEP 384:GNaMMN9cXFfM6p6OrTA0tLpqN4I8E3CZ8e/ayfTWJAC:vxc26tIIpqkESZ8eyTJ1
- TLSH T1E272D0E1D6926835B75A0FB0C981E133B3B2DB4B135253B77D12DA330EA78A40C71662
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4760 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4760 7zFM.exe Token: 35 4760 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4760 7zFM.exe