Analysis
- max time kernel
148s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
18/07/2026, 02:54
Static task
static1
Behavioral task
behavioral1
Sample
GalaxySwapper-main/GalaxySwapper.rar
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
GalaxySwapper-main/GalaxySwapper.rar
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
General
- Target GalaxySwapper-main/GalaxySwapper.rar
- Size 214KB
- Sample260718-ddvbeadz3l
- SHA256 ae51b1e8a87b4141e0907f123adb2114d8375899ae20157a8e3ca21f5c965e72
- MD5 38ec3fbe62733cdd302d4796d84632a6
- SHA1 663a6daffa64f3be3e474e2a9204a48147c90251
- SHA512 0dd3c16fc4595cafe168d89f55e9dcddae2736dfda9b332d8415991030553a65593797e314a4c06b3db705dd75774a28c9c46451bdd892712d3ec89b61777e67
- SSDEEP 6144:dXvse40urSpWTKwwutalH+NSSR5hiv1GD7kWhmC5M:dkL0+TKwuozZ7TmwM
- TLSH T1A12412D2B342FEF19FB250C6C4BA42072186619E172F6944D54743EABC37F94A0169EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 628 7zFM.exe Token: 35 628 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 628 7zFM.exe