Analysis
- max time kernel
149s - max time network
129s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
18/07/2026, 02:54
Static task
static1
Behavioral task
behavioral1
Sample
GalaxySwapper-main/GalaxySwapper.rar
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
GalaxySwapper-main/GalaxySwapper.rar
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
General
- Target GalaxySwapper-main/GalaxySwapper.rar
- Size 214KB
- Sample260718-ddvbeadz3l
- SHA256 ae51b1e8a87b4141e0907f123adb2114d8375899ae20157a8e3ca21f5c965e72
- MD5 38ec3fbe62733cdd302d4796d84632a6
- SHA1 663a6daffa64f3be3e474e2a9204a48147c90251
- SHA512 0dd3c16fc4595cafe168d89f55e9dcddae2736dfda9b332d8415991030553a65593797e314a4c06b3db705dd75774a28c9c46451bdd892712d3ec89b61777e67
- SSDEEP 6144:dXvse40urSpWTKwwutalH+NSSR5hiv1GD7kWhmC5M:dkL0+TKwuozZ7TmwM
- TLSH T1A12412D2B342FEF19FB250C6C4BA42072186619E172F6944D54743EABC37F94A0169EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2368 7zFM.exe Token: 35 2368 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2368 7zFM.exe