Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/07/2026, 19:52
Static task
static1
Behavioral task
behavioral1
Sample
vancefrosv3.rar
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
vancefrosv3.rar
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target vancefrosv3.rar
- Size 24KB
- Sample260720-yleadaft3s
- SHA256 41b096d69c1eefb59b11c4a86e05c15b5e6e90a06d51ce3ef3d8a83a248a4879
- MD5 c7fe052b5658f1f344113e51c4bce494
- SHA1 69052b61d199034ba404dc38910d256798b9662e
- SHA512 b855df7d48e5db06590f363202ab5ead0482758b2b67b294e737cbe7c3de8c3d66be44102a24340bfd00689427e2eb5bf4b6e5fcf53dc0417ef5092ee3662974
- SSDEEP 768:2jO/154y2S3gzdlyAIIK1JDaZQDgNt7/u/G5Ow:2jONWyDGdsAg1JaZGg/7/uel
- TLSH T1B5B2E1C22217E3405091D76C0A70C359DC83E8DB013FAA6F4AB1E4AA52F9AF7D2E55DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4384 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4384 7zFM.exe Token: 35 4384 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4384 7zFM.exe