Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/07/2026, 17:06
Static task
static1
Behavioral task
behavioral1
Sample
mods.rar
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
mods.rar
Resource
win11ltsc2024-20260629-en
4 signatures
150 seconds
General
- Target mods.rar
- Size 62B
- Sample260702-vmt6faav3s
- SHA256 b06835477fd7f47a646eb3aaedb1418027d8814856b5002281d2d1586bba180f
- MD5 24d0723e23e494b37df5c019f3e0f794
- SHA1 0f1279874b0fe28d19993276ddde8beeb2d1b776
- SHA512 7e4251d6d071d0c10584aa7bdbb8f275c42d50b61fe1f08e4633255f7d144f330ccb1ea8becd203e784f3976d4a0db8a90ae811704ae8b5c639906fb49266f0e
- TLSH T1FAA0028A987954177CA87054F11F4205033C645A2C418A685B6674423542219A3615A4
- MD5 SHA1 SHA512 TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3440 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3440 7zFM.exe Token: 35 3440 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3440 7zFM.exe