Overview
overview
8Static
static
5Clarity Ma...ee.rar
windows10-2004-x64
1Clarity Ma...ee.rar
windows11-ltsc_2024-x64
1AI_Install...de.pdf
windows10-2004-x64
3AI_Install...de.pdf
windows11-ltsc_2024-x64
3extra/launcher.py
windows10-2004-x64
3extra/launcher.py
windows11-ltsc_2024-x64
3extra/main...64.dll
windows10-2004-x64
1extra/main...64.dll
windows11-ltsc_2024-x64
1installs.bat
windows10-2004-x64
8installs.bat
windows11-ltsc_2024-x64
8run.bat
windows10-2004-x64
3run.bat
windows11-ltsc_2024-x64
3Analysis
- max time kernel
148s - max time network
153s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/07/2026, 00:35
Behavioral task
behavioral1
Sample
Clarity Makcu V2.6 - Free.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Clarity Makcu V2.6 - Free.rar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
AI_Installation_Guide.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
AI_Installation_Guide.pdf
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral5
Sample
extra/launcher.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
extra/launcher.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
extra/main.cp310-win_amd64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
extra/main.cp310-win_amd64.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
installs.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
installs.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
run.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
run.bat
Resource
win11ltsc2024-20260710-en
General
- Target Clarity Makcu V2.6 - Free.rar
- Size 78.6MB
- Sample260720-axlltsas3k
- SHA256 959b5da0362bb7bd6f3e72da784ff2a1178d219947b97aba70bcbc10d25cc2f8
- MD5 893236b1e7c1cb054b13e069a455f094
- SHA1 45a9cbc67e527f6928d63f00bf99596a7ac6f640
- SHA512 dc5925f4a92e9bbc65260940de35a3c0a5ade8bd616794041339fed3992b46797dcac27befb6d31ff90033751666df4de3277ffa020373fdb6ad531932c8174a
- SSDEEP 1572864:7p+cXHst79oL+VByYfYR7b9l+vLf0eq0IN/T7vvU4R3v2nHkWjXi5rV:76K6LycYR7LcJrIF7XU4xtkXG
- TLSH T1E50833F66A471B7CBCAC7578A2A1474DACECE3EB4E85D726240A35323E570F0B305295
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2420 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2420 7zFM.exe Token: 35 2420 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2420 7zFM.exe