Overview
overview
3Static
static
3SmartSolve.rar
windows10-2004-x64
1SmartSolve.rar
windows11-ltsc_2024-x64
1SmartSolve...es.bat
windows10-2004-x64
1SmartSolve...es.bat
windows11-ltsc_2024-x64
1SmartSolve...ar.bat
windows10-2004-x64
1SmartSolve...ar.bat
windows11-ltsc_2024-x64
1SmartSolve...13.pyc
windows10-2004-x64
3SmartSolve...13.pyc
windows11-ltsc_2024-x64
3SmartSolve...13.pyc
windows10-2004-x64
3SmartSolve...13.pyc
windows11-ltsc_2024-x64
3SmartSolve...13.pyc
windows10-2004-x64
3SmartSolve...13.pyc
windows11-ltsc_2024-x64
3SmartSolve...13.pyc
windows10-2004-x64
3SmartSolve...13.pyc
windows11-ltsc_2024-x64
3SmartSolve...13.pyc
windows10-2004-x64
3SmartSolve...13.pyc
windows11-ltsc_2024-x64
3SmartSolve...13.pyc
windows10-2004-x64
3SmartSolve...13.pyc
windows11-ltsc_2024-x64
3SmartSolve...13.pyc
windows10-2004-x64
3SmartSolve...13.pyc
windows11-ltsc_2024-x64
3SmartSolve...13.pyc
windows10-2004-x64
3SmartSolve...13.pyc
windows11-ltsc_2024-x64
3SmartSolve...13.pyc
windows10-2004-x64
3SmartSolve...13.pyc
windows11-ltsc_2024-x64
3SmartSolve...13.pyc
windows10-2004-x64
3SmartSolve...13.pyc
windows11-ltsc_2024-x64
3SmartSolve...13.pyc
windows10-2004-x64
3SmartSolve...13.pyc
windows11-ltsc_2024-x64
3SmartSolve...13.pyc
windows10-2004-x64
3SmartSolve...13.pyc
windows11-ltsc_2024-x64
3SmartSolve...13.pyc
windows10-2004-x64
3SmartSolve...13.pyc
windows11-ltsc_2024-x64
3Analysis
- max time kernel
148s - max time network
133s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
16/07/2026, 15:00
Static task
static1
Behavioral task
behavioral1
Sample
SmartSolve.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
SmartSolve.rar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
SmartSolve/install_modules.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
SmartSolve/install_modules.bat
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral5
Sample
SmartSolve/output/clear.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
SmartSolve/output/clear.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
SmartSolve/src/__pycache__/account_info.cpython-313.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
SmartSolve/src/__pycache__/account_info.cpython-313.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
SmartSolve/src/__pycache__/auth_intent.cpython-313.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
SmartSolve/src/__pycache__/auth_intent.cpython-313.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
SmartSolve/src/__pycache__/bot.cpython-313.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
SmartSolve/src/__pycache__/bot.cpython-313.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
SmartSolve/src/__pycache__/custom_solver.cpython-313.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
SmartSolve/src/__pycache__/custom_solver.cpython-313.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
SmartSolve/src/__pycache__/output.cpython-313.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
SmartSolve/src/__pycache__/output.cpython-313.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
SmartSolve/src/__pycache__/pow.cpython-313.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
SmartSolve/src/__pycache__/pow.cpython-313.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
SmartSolve/src/__pycache__/roblox.cpython-313.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
SmartSolve/src/__pycache__/roblox.cpython-313.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
SmartSolve/src/__pycache__/rostile.cpython-313.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
SmartSolve/src/__pycache__/rostile.cpython-313.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
SmartSolve/src/__pycache__/runtime.cpython-313.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
SmartSolve/src/__pycache__/runtime.cpython-313.pyc
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral25
Sample
SmartSolve/src/__pycache__/secure.cpython-313.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
SmartSolve/src/__pycache__/secure.cpython-313.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
SmartSolve/src/__pycache__/session.cpython-313.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
SmartSolve/src/__pycache__/session.cpython-313.pyc
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral29
Sample
SmartSolve/src/__pycache__/util.cpython-313.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
SmartSolve/src/__pycache__/util.cpython-313.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
SmartSolve/src/__pycache__/web_ui.cpython-313.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
SmartSolve/src/__pycache__/web_ui.cpython-313.pyc
Resource
win11ltsc2024-20260709-en
General
- Target SmartSolve.rar
- Size 303KB
- Sample260716-sdtr7sfy8n
- SHA256 2058ddb05d37ddeac1a5564c00a88db8ea021f8f02dd885e120cf84d282be23b
- MD5 ca6130792b08aaad27d88c6bc2c1c5f5
- SHA1 9e2ece578213757c99bc52ba1cb1108bd58c8d6b
- SHA512 d78092b03987f7576bc685e1922db1da2ba2a2530364fe4b6d994ea04440588771c96aadd2b7cb1d135351f805eeeeb5504e3fffcd8a38cc940e4d94f403d269
- SSDEEP 6144:HrCQZ/mNJHJxeAKqMG3w8kcJqLhTQyZmu2K+Ls4C/2oVG53bt9Rq:2QUNJpYAKhJxlQyZmTYn5VAbXRq
- TLSH T13E64235F0A38953B17AF28FF6BBB2C1567F25925FD05A6430A104F82BC5B2E130B4A4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4108 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4108 7zFM.exe Token: 35 4108 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4108 7zFM.exe