3d7d36af423146991a6d7ada68a63bd10c1217243a1c393212ca4758ac36b045

Analysis

max time kernel
150s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
21/07/2026, 21:45

Target
JewWorm 5.6.7z
Size 31.9MB
Sample260721-1menmsfe93
SHA256 3d7d36af423146991a6d7ada68a63bd10c1217243a1c393212ca4758ac36b045
MD5 778f0eb90f41df92d244681bae6d96d4
SHA1 a128908dab0957367a036a42bd205f27293425bc
SHA512 48bedbcc11fd138a3a2c212d649cb069e7bb5d183b18466928eb153a8767cec09dfe421ff3b83127c6970187721689607a2e61400512f0db5c11c6e093336bae
SSDEEP 786432:eqVxjQaXe6e/tKt3xaSfVcW5BulqwTVKipnFvyygOr:RjFXeNSaS6wulqwZKiTvyygOr
TLSH
T13977336B9A0739284FD6C4331539AA36F72AFF597A30A96A9420FFC4113F6C395C3215
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4812	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	4812	7zFM.exe
Token: 35	4812	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4812	7zFM.exe