Analysis
- max time kernel
148s - max time network
114s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
14/07/2026, 10:57
Static task
static1
Behavioral task
behavioral1
Sample
promo checker.7z
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
promo checker.7z
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target promo checker.7z
- Size 12.9MB
- Sample260714-m2ltlsa15p
- SHA256 b51e11505fc357b45e1b0b47a43b84706ae5d3ea4a0b9b37631008bc147c35ff
- MD5 c81b86c4db73af586be5cb4f4e2a76ec
- SHA1 8c98eb54f43b855406c3e00fa7bdfa148de8851c
- SHA512 31cba585dba919f330018d4fc7565e89494e0e9a2d5cf6e075ae6a9dd21a7e664aacae547885999c2a43497a812d74c9287e4b3e715b2377645f60eb3a45db77
- SSDEEP 196608:ciRQJ6IPLipcE6NvoWjUbnVa8hQQ6jm1+/oPWMfQtiXHOcqv8uMHCHFnJOR/9Vyz:ciRA1PWcPWa8hXDAxq0yucagCHFn29E
- TLSH T16DD6330E3911E98A0F180C4FB8ADDB5CA16F15FAA60F1374B76475AE3C24F429DA217D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2804 7zFM.exe Token: 35 2804 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2804 7zFM.exe