Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
17/07/2026, 12:16
Static task
static1
Behavioral task
behavioral1
Sample
ws6d3d.rar
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
ws6d3d.rar
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
australia-500000-personal-db.csv
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
australia-500000-personal-db.csv
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
General
- Target ws6d3d.rar
- Size 12.8MB
- Sample260717-pfymdsav2m
- SHA256 313ce291d1eabae8ea32104ceeba7e2aa889b6623964b58f278eeb1b5948575b
- MD5 22434fb1879934ff2a7c473383ec476b
- SHA1 4ae8c93145c574a59787adf28cfe40b5e4726ba6
- SHA512 43ed108a5ba39ca4bb7a2b624c5bc8a11c6879875653d2a8d25f0892ac4b4598bd3fba8b4d1fbaf6885ab7761c42cfa267de8d336c380c88aa79e381df1c8e72
- SSDEEP 196608:/xAqMkj/NUfTfEZaif0Zs8Iw1BvA1Fpt9ZRYl+2zraVN0lRPilMMi+kq479:/2qWfTfuft8z1Bv0FH9HYlhzq0rPUYJ
- TLSH T15BD6335E192E0A53A45CB0FCE6D107E13C1987407F33A9606F4DB2578AEA36F494EDAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4336 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4336 7zFM.exe Token: 35 4336 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4336 7zFM.exe