Overview
overview
7Static
static
3game-resid...6).rar
windows10-2004-x64
1game-resid...6).rar
windows11-ltsc_2024-x64
1GOG-Games....es.url
windows10-2004-x64
1GOG-Games....es.url
windows11-ltsc_2024-x64
1setup_resi...-1.bin
windows10-2004-x64
1setup_resi...-1.bin
windows11-ltsc_2024-x64
1setup_resi...6).exe
windows10-2004-x64
7setup_resi...6).exe
windows11-ltsc_2024-x64
7Analysis
- max time kernel
148s - max time network
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
12/07/2026, 16:29
Behavioral task
behavioral1
Sample
game-resident.evil.2-(88306).rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
game-resident.evil.2-(88306).rar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
GOG-Games.to - Free GOG PC Games.url
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
GOG-Games.to - Free GOG PC Games.url
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
setup_resident_evil_2_1.0_hotfix5_(88306)-1.bin
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
setup_resident_evil_2_1.0_hotfix5_(88306)-1.bin
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
setup_resident_evil_2_1.0_hotfix5_(88306).exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
setup_resident_evil_2_1.0_hotfix5_(88306).exe
Resource
win11ltsc2024-20260709-en
General
- Target game-resident.evil.2-(88306).rar
- Size 885.0MB
- Sample260712-tzpaaafs3v
- SHA256 f9472e64cc6cd561d3355f0d48d0109567da4fe367009feabec6657a03200763
- MD5 67c847aea4b05c5acab377065fe91cc1
- SHA1 e2f2b472a5f4f3647375a7c624ad519897293b34
- SHA512 aa9d91fe01afcce5c78ef34424465a17a4c170feaf51d5e8944fb15c1175d34333c8e612832fd6adcdd41d1f7fffb6cc12322f0915431dc27c007d137a33ff38
- SSDEEP 25165824:z7P6j8XWj8ZLQEMRTnyxymAxlvf2di14Rx:zrw8SEMR/XxlXwi6Rx
- TLSH T160A933E5F82230B1F5594773DA583849278AD92607BDE3C827B82B2876DD7C114226FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 6036 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 6036 7zFM.exe Token: 35 6036 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 6036 7zFM.exe