5de52b3fda57d905f54733f563785c76cfcc2e96565efffc5db7c510a5f28949

Analysis

max time kernel
150s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/07/2026, 15:25

Target
$PLUGINSDIR/app-64.7z
Size 80.6MB
Sample260702-styfbsd14m
SHA256 5de52b3fda57d905f54733f563785c76cfcc2e96565efffc5db7c510a5f28949
MD5 bd127f1f02d3f30784e64b935e0537c7
SHA1 e98ea933551357b51fcbb0437e28fe1b306f37a9
SHA512 85423ec29867b1acfd7be239ff96fd894ba20277afd4b943efd01b7d151a15a56220d2038d852d0eed7e21422b731a16c5767ea5ed65f0ac1392217054fffb88
SSDEEP 1572864:ELdkJiqH3gzrsND0qzt4j0DFIABZI48z2Fi/S8JKBUmy+N5Xe6EfB7o:E2SzrsNDjzqyaABZVPArg/bXeB7o
TLSH
T1380833C847578A26C1DF5FDC122E17E29B1B4DB0A739E0EF47638431F99946AC68824F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3200	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	3200	7zFM.exe
Token: 35	3200	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3200	7zFM.exe