Analysis
- max time kernel
150s - max time network
134s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/07/2026, 11:16
Static task
static1
Behavioral task
behavioral1
Sample
Release.rar
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
Release.rar
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
Release/Executor.rar
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
Release/Executor.rar
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Behavioral task
behavioral5
Sample
Release/Pa$$word.txt
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Release/Pa$$word.txt
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
General
- Target Release.rar
- Size 963KB
- Sample260720-ndfhcsat9t
- SHA256 c28e177f4a96a97f256b5919631a3aa1c2bd64e1ee193f9a47a8fa70dbb5fd8d
- MD5 bc3158f149f55405909d1fa8bd94c006
- SHA1 25a016e4d45c5f402eb18a329b8df45d09d81104
- SHA512 0f07534ffa5670bb81ea05f4da1bf2e7ca99ba14a19b27cbdc729035fe7bf2a28457bf587826839bb6b0eeb03c7aa08e6e0210024832ffc517c29a900f1d22d8
- SSDEEP 24576:fG0/tI78m7yLd2C0lMSiYWa2L7+IG4f9lZBBbwEB/sdD34I7ZW:XtIHy2PHiua7VlVf/EZW
- TLSH T19D252358DD4AB77208D0BB41E8A1509758FE77629B83408DBBACC49B4433B1CAE95FDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 6000 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 6000 7zFM.exe Token: 35 6000 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 6000 7zFM.exe