Overview
overview
7Static
static
1Risxn's Pr...V4.rar
windows10-2004-x64
7Risxn's Pr...V4.rar
windows11-ltsc_2024-x64
1Risxn's Pr...nt.lnk
windows10-2004-x64
7Risxn's Pr...nt.lnk
windows11-ltsc_2024-x64
3Risxn's Pr...on.lnk
windows10-2004-x64
Risxn's Pr...on.lnk
windows11-ltsc_2024-x64
Risxn's Pr...ns.exe
windows10-2004-x64
3Risxn's Pr...ns.exe
windows11-ltsc_2024-x64
3Risxn's Pr...er.lnk
windows10-2004-x64
7Risxn's Pr...er.lnk
windows11-ltsc_2024-x64
3Risxn's Pr...V4.bat
windows10-2004-x64
6Risxn's Pr...V4.bat
windows11-ltsc_2024-x64
6Risxn's Pr...nt.lnk
windows10-2004-x64
7Risxn's Pr...nt.lnk
windows11-ltsc_2024-x64
4Analysis
- max time kernel
148s - max time network
133s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
15/07/2026, 01:54
Static task
static1
Behavioral task
behavioral1
Sample
Risxn's Process Lowering Pack V4.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Risxn's Process Lowering Pack V4.rar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Risxn's Process Lowering Pack V4/1. Create Restore Point.lnk
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Risxn's Process Lowering Pack V4/1. Create Restore Point.lnk
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Risxn's Process Lowering Pack V4/2. System Configuration.lnk
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Risxn's Process Lowering Pack V4/2. System Configuration.lnk
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Risxn's Process Lowering Pack V4/3. autoruns.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Risxn's Process Lowering Pack V4/3. autoruns.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral9
Sample
Risxn's Process Lowering Pack V4/4. Task Manager.lnk
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Risxn's Process Lowering Pack V4/4. Task Manager.lnk
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
Risxn's Process Lowering Pack V4/Risxn's Process Panel V4.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Risxn's Process Lowering Pack V4/Risxn's Process Panel V4.bat
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral13
Sample
Risxn's Process Lowering Pack V4/Use Restore Point.lnk
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Risxn's Process Lowering Pack V4/Use Restore Point.lnk
Resource
win11ltsc2024-20260709-en
General
- Target Risxn's Process Lowering Pack V4.rar
- Size 508KB
- Sample260715-cb3dkab14x
- SHA256 c20ef8a7b6882fd47ab65169d41659c4881583118a08be9836827b31573d829d
- MD5 ce70aa1f6fa1cc0a14e079fc56b65970
- SHA1 b58671b63bb764f285896a824f5020c314e651fa
- SHA512 0034f6177a6af1305903d554a4611c8c7a0e77bb511ceb0b9cb3c767a2febc113ce372ac9643637ca4181cb124f7e99c02ddee6c472b9069b35f6869431263bf
- SSDEEP 12288:MfYoh0Bs57nrMWRQKnjBF1Z04MZAbD/0aBrn6zwiGVd:MtKBQ7rdRQKnVF1Zffco
- TLSH T122B423D6673A1E183CEA36FB0CA3D66FA2519CC2DC5335770633917F2C0A4A5B06CA91
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2360 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2360 7zFM.exe Token: 35 2360 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2360 7zFM.exe
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Risxn's Process Lowering Pack V4.rar"1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:2360