Analysis
- max time kernel
148s - max time network
128s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
28/06/2026, 04:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
R6 External-Esp (1).rar
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
R6 External-Esp (1).rar
Resource
win11ltsc2024-20260618-en
4 signatures
150 seconds
General
- Target R6 External-Esp (1).rar
- Size 5.4MB
- Sample260628-esystae19q
- SHA256 6c1cee2408aa1a76d1b7379c46b47325c16150eb3daacdff8e4c035118b778f8
- MD5 7ef0535f4d24799fffd33f4b0853840e
- SHA1 c858f0c9c44e47e64595d058b7d516c3d0ef2c4e
- SHA512 8f419add05791f3154a2c83766026cd06c91db8623c0f21c0643cd640d33edb2e3570b9c5bbf8d77e0f9d8983e35b13f11b519bf38dcaed90fd8c905b6daf85d
- SSDEEP 98304:+fSV+9iaTgD/3gJk8Nu4WxuQhG2tsvmSUF0Wl4WV5yGrmveHKiunn4yOGK/Q8ZpU:p+JMj3gG+0hPtom/09WZmveqihL5/bk9
- TLSH T1C0463350DAA580451B39FCC8732CC7A2C5B0868FE5A3DCB9979BDFBD006690355A863F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5740 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 5740 7zFM.exe Token: 35 5740 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5740 7zFM.exe