Analysis
- user interaction
yes - max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/07/2026, 16:12
Static task
static1
Behavioral task
behavioral1
Sample
Toon.Boom.Harmony.Premium.25.0.1.24106.rar
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
Toon.Boom.Harmony.Premium.25.0.1.24106.rar
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target Toon.Boom.Harmony.Premium.25.0.1.24106.rar
- Size 641.9MB
- Sample260709-tntevsd12z
- SHA256 c9edbcae1540e0b29a413ee56b4ffe623588b2cf380058919a56b5b49114c7ca
- MD5 ecfbc9693cc7bdcc423b16ff693e4209
- SHA1 60df79e7780145ae0d9b9e8e32edb139dc5cf49a
- SHA512 00fcbb9b62a572f11f65d15689e22a49e6c8600239617c9748f6cfdeff1570e63236507ab1fac71920a2ca44f59b4f5d138785aecf331ef9d20c0f4118fc7c71
- SSDEEP 12582912:7HE/OuLZrtdSH/fhokQbGAgLncuqB4AxO9mlPWvKzDrxRApJbcuuhq:7HERLZrzSH/qk7nDUB4As9GPWvkDrxRW
- TLSH T1E269330D4A674184AAAECA9BD74D448E40A7ED0C5D8B164DF4E63C5006E6AF7CFB37C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4680 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4680 7zFM.exe Token: 35 4680 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4680 7zFM.exe
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Toon.Boom.Harmony.Premium.25.0.1.24106.rar"1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:4680