Overview
overview
8Static
static
1kaspersky_...hi.rar
windows10-2004-x64
8kaspersky_...hi.rar
windows11-ltsc_2024-x64
1Kaspersky ...22.exe
windows10-2004-x64
6Kaspersky ...22.exe
windows11-ltsc_2024-x64
6Kaspersky ...У.url
windows10-2004-x64
1Kaspersky ...У.url
windows11-ltsc_2024-x64
1Kaspersky ...ч.txt
windows10-2004-x64
1Kaspersky ...ч.txt
windows11-ltsc_2024-x64
1Analysis
- max time kernel
150s - max time network
168s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/07/2026, 19:34
Static task
static1
Behavioral task
behavioral1
Sample
kaspersky_premium_21_22_klyuchi.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
kaspersky_premium_21_22_klyuchi.rar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Kaspersky Premium 21.22/Kaspersky Premium 21.22.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Kaspersky Premium 21.22/Kaspersky Premium 21.22.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Kaspersky Premium 21.22/ВОТ-СОФТ.РУ.url
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Kaspersky Premium 21.22/ВОТ-СОФТ.РУ.url
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Kaspersky Premium 21.22/Ключ.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Kaspersky Premium 21.22/Ключ.txt
Resource
win11ltsc2024-20260709-en
General
- Target kaspersky_premium_21_22_klyuchi.rar
- Size 615.2MB
- Sample260723-x98nfstyay
- SHA256 046a092fa17dd66e94089a15b53e47c4c2b439222461910621bed31ffc42b1dd
- MD5 dd91cb4fa3f73c2160b8cfac2213e941
- SHA1 c95a485308fe12a8147c728089fe1f31a7f4d655
- SHA512 0be64d73e94ddd219c08e2c57a6d9155ff55b8099ad78af1a45c03812b6f68217b0ec914270c137832ab647917c6ed16f69240ff832fb00079edb52a11030a37
- SSDEEP 12582912:7VKBPWuK/+8p+wS2am9OMZykynX2d7ai2N4iR+m+Q/M7+fhSkRMwsICEuTk3:4Z9j2am9mRnGVaiwZRf+ST2wZX
- TLSH T1D66933C90634C9E5AC64937F81FDCAD2D5FBBB75574790AB0253E343898887C20629EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4844 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4844 7zFM.exe Token: 35 4844 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4844 7zFM.exe
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\kaspersky_premium_21_22_klyuchi.rar"1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:4844