Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/07/2026, 22:41
Static task
static1
Behavioral task
behavioral1
Sample
BOXY XBOX ACCOUNT CHECKER.rar
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
BOXY XBOX ACCOUNT CHECKER.rar
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target BOXY XBOX ACCOUNT CHECKER.rar
- Size 19.0MB
- Sample260720-2mg97sf18p
- SHA256 3d455d4c901b5a01a51cc882d93767dc1c00231423133ffd6cf801dd494680fc
- MD5 4fd989a729cc235d451c02c172489328
- SHA1 5ea4f82cf2cb6249899b5958515a72d04a4265cf
- SHA512 de99645b9aba46a7396d170c873117db82d8bc21b07df2a52813d6863e0af105709e698fe16e69cdd48b1efd02ef12f5079619a2f78131b473ab5c874990134d
- SSDEEP 393216:rrasJTb3kVT4xfL00LQsJxTUu4FMwq3ShMv3ryEF:rG0vm6L00LQe5UrsShC3ry4
- TLSH T1E51733AA0AE45A1E9531143E1E6B98BCDF2C32855BFB420A9CD370D3AFFC495EC158D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4384 7zFM.exe Token: 35 4384 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4384 7zFM.exe