fb2499fafd47f9e111ce76cc38fd4131761e47516eb4f9e1da11d157d524169f

Login
Reports

Overview

overview

Static

static

Native-Acc...2).exe

windows11-21h2-x64

$PLUGINSDI...er.dll

windows11-21h2-x64

$PLUGINSDI...ls.dll

windows11-21h2-x64

$PLUGINSDI...em.dll

windows11-21h2-x64

$PLUGINSDI...ll.dll

windows11-21h2-x64

$PLUGINSDIR/app-64.7z

windows11-21h2-x64

resources/...trc.js

windows11-21h2-x64

resources/...eps.js

windows11-21h2-x64

resources/...zip.js

windows11-21h2-x64

resources/...min.js

windows11-21h2-x64

resources/...ph.svg

windows11-21h2-x64

resources/...e64.js

windows11-21h2-x64

resources/...ect.js

windows11-21h2-x64

resources/...ons.js

windows11-21h2-x64

resources/...c32.js

windows11-21h2-x64

resources/...lts.js

windows11-21h2-x64

resources/...nal.js

windows11-21h2-x64

resources/...ate.js

windows11-21h2-x64

resources/...ker.js

windows11-21h2-x64

resources/...dex.js

windows11-21h2-x64

resources/...dex.js

windows11-21h2-x64

resources/...der.js

windows11-21h2-x64

resources/...oad.js

windows11-21h2-x64

resources/...ter.js

windows11-21h2-x64

resources/...ter.js

windows11-21h2-x64

resources/...ils.js

windows11-21h2-x64

resources/...ect.js

windows11-21h2-x64

resources/...ser.js

windows11-21h2-x64

$PLUGINSDI...ec.dll

windows11-21h2-x64

$PLUGINSDI...7z.dll

windows11-21h2-x64

$R0/Uninst...ss.exe

windows11-21h2-x64

VC_redist.x64.exe

windows11-21h2-x64

Analysis

max time kernel
149s
max time network
122s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
24/07/2026, 21:54

Sharing

Copy URL Twitter E-mail

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Native-Access_2 (2).exe

Resource

win11-20260513-en

windows11-21h2-x64

19 signatures

150 seconds

Behavioral task

behavioral2

Sample

$PLUGINSDIR/SpiderBanner.dll

Resource

win11-20260513-en

windows11-21h2-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral3

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral4

Sample

$PLUGINSDIR/System.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral5

Sample

$PLUGINSDIR/WinShell.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral6

Sample

$PLUGINSDIR/app-64.7z

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

resources/app.asar.unpacked/node_modules/jszip/.eslintrc.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral8

Sample

resources/app.asar.unpacked/node_modules/jszip/deps.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral9

Sample

resources/app.asar.unpacked/node_modules/jszip/dist/jszip.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral10

Sample

resources/app.asar.unpacked/node_modules/jszip/dist/jszip.min.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral11

Sample

resources/app.asar.unpacked/node_modules/jszip/graph.svg

Resource

win11-20260513-en

windows11-21h2-x64

11 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral12

Sample

resources/app.asar.unpacked/node_modules/jszip/lib/base64.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral13

Sample

resources/app.asar.unpacked/node_modules/jszip/lib/compressedObject.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral14

Sample

resources/app.asar.unpacked/node_modules/jszip/lib/compressions.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral15

Sample

resources/app.asar.unpacked/node_modules/jszip/lib/crc32.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral16

Sample

resources/app.asar.unpacked/node_modules/jszip/lib/defaults.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral17

Sample

resources/app.asar.unpacked/node_modules/jszip/lib/external.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral18

Sample

resources/app.asar.unpacked/node_modules/jszip/lib/flate.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral19

Sample

resources/app.asar.unpacked/node_modules/jszip/lib/generate/ZipFileWorker.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral20

Sample

resources/app.asar.unpacked/node_modules/jszip/lib/generate/index.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral21

Sample

resources/app.asar.unpacked/node_modules/jszip/lib/index.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral22

Sample

resources/app.asar.unpacked/node_modules/jszip/lib/license_header.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral23

Sample

resources/app.asar.unpacked/node_modules/jszip/lib/load.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral24

Sample

resources/app.asar.unpacked/node_modules/jszip/lib/nodejs/NodejsStreamInputAdapter.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral25

Sample

resources/app.asar.unpacked/node_modules/jszip/lib/nodejs/NodejsStreamOutputAdapter.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral26

Sample

resources/app.asar.unpacked/node_modules/jszip/lib/nodejsUtils.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral27

Sample

resources/app.asar.unpacked/node_modules/jszip/lib/object.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral28

Sample

resources/app.asar.unpacked/node_modules/jszip/lib/readable-stream-browser.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral29

Sample

$PLUGINSDIR/nsExec.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral30

Sample

$PLUGINSDIR/nsis7z.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral31

Sample

$R0/Uninstall Native Access.exe

Resource

win11-20260513-en

windows11-21h2-x64

9 signatures

150 seconds

defense_evasion discovery execution

Behavioral task

behavioral32

Sample

VC_redist.x64.exe

Resource

win11-20260513-en

windows11-21h2-x64

5 signatures

150 seconds

discovery

Report Analysis Logs

General

Target
$PLUGINSDIR/app-64.7z
Size 152.7MB
Sample260724-1sektstybs
SHA256 fb2499fafd47f9e111ce76cc38fd4131761e47516eb4f9e1da11d157d524169f
MD5 399f57adea1dc3fcd5a9883ff6d77d81
SHA1 2661dcdb86766fa4c19858b4057de27618e31792
SHA512 10928844a015445cec7a6766cf7e3c1de3217738b11d5f113baf14cc34f5b667615d07c187246bd510dbaaca1a48e9c09c5d7642a58257ffa5effca3377b9914
SSDEEP 3145728:wT+LNRm0kuoNcJfCf+j509TKX9aWAE5PJ1nQfkZCnrzmuEFd5B:M+LNRm0kuoatC2jHIWfPJ1nQfTmuEFrB
TLSH
T1447833F342744960504F96BCEB22A18558509ABFB4C3C2D5BF5ECA7CB862F604BD23D6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3128	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	3128	7zFM.exe
Token: 35	3128	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3128	7zFM.exe

Processes

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\app-64.7z"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:3128

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads