Analysis
- max time kernel
148s - max time network
122s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/07/2026, 20:12
Static task
static1
Behavioral task
behavioral1
Sample
Onimai_1.7.1.rar
Resource
win10ltsc2021-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
Onimai_1.7.1.rar
Resource
win11ltsc2024-20260629-en
4 signatures
150 seconds
General
- Target Onimai_1.7.1.rar
- Size 10.2MB
- Sample260702-yy2lfad12t
- SHA256 1812dc467d6e39cf081bb07cc494c3c342238244cbbcc847480e085c6c82ed69
- MD5 457eb89c65bcdb236331ca9703e96d67
- SHA1 c2ea612387fdd409f0330912e537d109561befdb
- SHA512 7a47aafa47dcdfaf4f7ff5880959e40dc82ddf3d4eca683003745cb0a690ea34b34936f74bb7a709dcf267a693a0b1d3b28354708b0ed4b53ee90110e8ba90b8
- SSDEEP 196608:OXQPnNCUWTFy+pJEbmWf4c8pGSx8quHN8F3WJ83hW6D3zXxIf4AMxoP0:OgPNDavzumWfmpLxCHNIfw67jxkDP0
- TLSH T182B63303E5076FB05AD0AD527E7D6056C6590242EFB5F08AFCB7963E563A220B31C27B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3596 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3596 7zFM.exe Token: 35 3596 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3596 7zFM.exe