Overview
overview
8Static
static
3Weed-Hack-V1.rar
windows10-2004-x64
Weed-Hack-V1.rar
windows11-ltsc_2024-x64
1Weed-Hack-....5.exe
windows10-2004-x64
8Weed-Hack-....5.exe
windows11-ltsc_2024-x64
8Weed-Hack-...fig.py
ubuntu-18.04-amd64
1Weed-Hack-...fig.py
debian-9-armhf
1Weed-Hack-...fig.py
debian-9-mips
Weed-Hack-...fig.py
debian-9-mipsel
Weed-Hack-...ts.txt
windows10-2004-x64
1Weed-Hack-...ts.txt
windows11-ltsc_2024-x64
1Weed-Hack-...rt.bat
windows10-2004-x64
3Weed-Hack-...rt.bat
windows11-ltsc_2024-x64
3Analysis
- max time kernel
150s - max time network
131s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
18/07/2026, 04:30
Static task
static1
Behavioral task
behavioral1
Sample
Weed-Hack-V1.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Weed-Hack-V1.rar
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral3
Sample
Weed-Hack-V1/WeedHack_Injector_V6.5.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Weed-Hack-V1/WeedHack_Injector_V6.5.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Weed-Hack-V1/config.py
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral6
Sample
Weed-Hack-V1/config.py
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral7
Sample
Weed-Hack-V1/config.py
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral8
Sample
Weed-Hack-V1/config.py
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral9
Sample
Weed-Hack-V1/requirements.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Weed-Hack-V1/requirements.txt
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral11
Sample
Weed-Hack-V1/start.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Weed-Hack-V1/start.bat
Resource
win11ltsc2024-20260709-en
General
- Target Weed-Hack-V1.rar
- Size 78.8MB
- Sample260718-e4v63abw5w
- SHA256 cf8e3e77855ad2be9e0caa65340655bfd19a259fd62ef8a245a09e236422b097
- MD5 9e34e317ebb751c3f9506ded56ff50f3
- SHA1 9989161e85dd324b753f66fa9047cc62f885b0db
- SHA512 9bcad50eb0f3b49c702a5bc0823262ef1ea667d83d42b6533f725d2cc5209f6e3a3fe567b5af9243805df81a5de6e3d9284dcc4f238660294ac54ee7aeb2fd44
- SSDEEP 1572864:/gffKUejNWsiZXW0LArBHLATDk2rVNjfzWoVNEI8E8UXdl+lBsOihX:/gfyUE7iUKAFHLek4VNjzzyUXdl+8hX
- TLSH T1650833C31A7DEC2B866FCD525CDDD9ADA6D00B38EC369A4201E606375DEF7533858A80
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5840 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 5840 7zFM.exe Token: 35 5840 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5840 7zFM.exe