Overview
overview
7Static
static
3XTweaks Premium.rar
windows10-2004-x64
1XTweaks Premium.rar
windows11-ltsc_2024-x64
1XTweaks Pr...m.html
windows10-2004-x64
3XTweaks Pr...m.html
windows11-ltsc_2024-x64
3XTweaks Pr...um.exe
windows10-2004-x64
7XTweaks Pr...um.exe
windows11-ltsc_2024-x64
1XTweaks Pr...47.dll
windows10-2004-x64
1XTweaks Pr...eg.dll
windows10-2004-x64
1XTweaks Pr...eg.dll
windows11-ltsc_2024-x64
1XTweaks Pr...GL.dll
windows10-2004-x64
1XTweaks Pr...GL.dll
windows11-ltsc_2024-x64
1XTweaks Pr...v2.dll
windows10-2004-x64
1XTweaks Pr...v2.dll
windows11-ltsc_2024-x64
1XTweaks Pr...te.exe
windows10-2004-x64
3XTweaks Pr...te.exe
windows11-ltsc_2024-x64
3XTweaks Pr...er.dll
windows10-2004-x64
1XTweaks Pr...er.dll
windows11-ltsc_2024-x64
1XTweaks Pr...-1.dll
windows10-2004-x64
1XTweaks Pr...-1.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
148s - max time network
113s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
11/07/2026, 15:53
Static task
static1
Behavioral task
behavioral1
Sample
XTweaks Premium.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
XTweaks Premium.rar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
XTweaks Premium/LICENSES.chromium.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
XTweaks Premium/LICENSES.chromium.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
XTweaks Premium/X Tweaks Premium.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
XTweaks Premium/X Tweaks Premium.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
XTweaks Premium/d3dcompiler_47.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
XTweaks Premium/ffmpeg.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
XTweaks Premium/ffmpeg.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral10
Sample
XTweaks Premium/libEGL.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
XTweaks Premium/libEGL.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral12
Sample
XTweaks Premium/libGLESv2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
XTweaks Premium/libGLESv2.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral14
Sample
XTweaks Premium/resources/elevate.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral15
Sample
XTweaks Premium/resources/elevate.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral16
Sample
XTweaks Premium/vk_swiftshader.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
XTweaks Premium/vk_swiftshader.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral18
Sample
XTweaks Premium/vulkan-1.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
XTweaks Premium/vulkan-1.dll
Resource
win11ltsc2024-20260710-en
General
- Target XTweaks Premium.rar
- Size 80.8MB
- Sample260711-tbwpfset9p
- SHA256 97e2dddbe91471668a4331598e24aa48d825eddf9745feae53be3248e8656564
- MD5 4c1992ae0d7c31bd66f6d3442b8e4c83
- SHA1 fc33935f39ad8207af302f6254d0895cbe9be348
- SHA512 af2618cf8df51dcfae6d4498247794a3859f3db3b89b3e2fa75310f464b1fb88d5fb71a7a289d7bbc14e7cac91ea050b2019459917fab1169529e86b5e5032b2
- SSDEEP 1572864:AwiN1j0KiKOWdATTu16oF8KHhvucEzWoTFz/1vHwQ3u0uMkr9TW:RwuWdGTuU1Yhk11vX+jNTW
- TLSH T1A208330B008B63F2CC5E72E84747CE0B855A5B7F877E8AD6162889E51CA47D0DDB6CD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1224 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1224 7zFM.exe Token: 35 1224 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1224 7zFM.exe