Overview
overview
6Static
static
1Ryanherric...IN.rar
windows10-2004-x64
1Ryanherric...IN.rar
windows11-ltsc_2024-x64
1Ryanherric...re.url
windows10-2004-x64
1Ryanherric...re.url
windows11-ltsc_2024-x64
1Ryanherric...re.txt
windows10-2004-x64
1Ryanherric...re.txt
windows11-ltsc_2024-x64
1Ryanherric...on.jpg
windows10-2004-x64
1Ryanherric...on.jpg
windows11-ltsc_2024-x64
1Ryanherric...BG.mov
windows10-2004-x64
6Ryanherric...BG.mov
windows11-ltsc_2024-x64
1Ryanherric...BG.mov
windows10-2004-x64
6Ryanherric...BG.mov
windows11-ltsc_2024-x64
1Ryanherric...ay.mov
windows10-2004-x64
6Ryanherric...ay.mov
windows11-ltsc_2024-x64
1Ryanherric...SE.mov
windows10-2004-x64
6Ryanherric...SE.mov
windows11-ltsc_2024-x64
1Ryanherric...ay.mov
windows10-2004-x64
6Ryanherric...ay.mov
windows11-ltsc_2024-x64
1Ryanherric...BG.mov
windows10-2004-x64
6Ryanherric...BG.mov
windows11-ltsc_2024-x64
1Ryanherric...ay.mov
windows10-2004-x64
6Ryanherric...ay.mov
windows11-ltsc_2024-x64
1Ryanherric...ay.mov
windows10-2004-x64
6Ryanherric...ay.mov
windows11-ltsc_2024-x64
1Ryanherric...ay.mov
windows10-2004-x64
6Ryanherric...ay.mov
windows11-ltsc_2024-x64
1Ryanherric...ay.mov
windows10-2004-x64
6Ryanherric...ay.mov
windows11-ltsc_2024-x64
1Ryanherric...) .mov
windows10-2004-x64
6Ryanherric...) .mov
windows11-ltsc_2024-x64
1Ryanherric...OG.mov
windows10-2004-x64
6Ryanherric...OG.mov
windows11-ltsc_2024-x64
1Analysis
- max time kernel
148s - max time network
157s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/07/2026, 02:34
Static task
static1
Behavioral task
behavioral1
Sample
Ryanherrick_ULTIMATE STARTER PACK_AIMERSHIN.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Ryanherrick_ULTIMATE STARTER PACK_AIMERSHIN.rar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/More Resources Here.url
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/More Resources Here.url
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/More free stuff here.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/More free stuff here.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/Pls show some appreciation.jpg
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/Pls show some appreciation.jpg
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH- CRT LIGHT LEAK BG.mov
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH- CRT LIGHT LEAK BG.mov
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH- LIGHT LEAK BG.mov
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH- LIGHT LEAK BG.mov
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH- LIGHT LEAK Overlay.mov
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH- LIGHT LEAK Overlay.mov
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH- NOISE.mov
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH- NOISE.mov
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH- VERT 2 Overlay.mov
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH- VERT 2 Overlay.mov
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral19
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH- VERT BG.mov
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH- VERT BG.mov
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH- VERT FILM 2 Overlay.mov
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH- VERT FILM 2 Overlay.mov
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH- VERT FILM Overlay.mov
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH- VERT FILM Overlay.mov
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH- VERT NOISE Overlay.mov
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH- VERT NOISE Overlay.mov
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH- VERT Overlay.mov
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH- VERT Overlay.mov
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH-CRT BG (BLUE) .mov
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH-CRT BG (BLUE) .mov
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH-CRT OG.mov
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
Ryanherrick - ULTIMATE STARTER PACK/ESSENTIAL OL/RH-CRT OG.mov
Resource
win11ltsc2024-20260709-en
General
- Target Ryanherrick_ULTIMATE STARTER PACK_AIMERSHIN.rar
- Size 226.1MB
- Sample260724-c2sbaaeb99
- SHA256 7cb56ddc50e1b02b2a3a7754108a375681c89d2015bbd5542385794de8c6729a
- MD5 3f7479b36ff1935f09cc24ccae17cfb2
- SHA1 6ca2bb35b6fd906fc14a37641151aa4a5cdd9bb0
- SHA512 d7ac4ace420564f7461541034d248bf22d4ba2b08b0bcb053dae8eaeb9cdc203e8c8ff31f4ab8d57de0353457a6440d56c31e280f99dd4d505076eb285bb7238
- SSDEEP 6291456:x4qrQ/41/vaB6tftP4KORbCGJsJT9QUN/VPbcc/A0Fe2+2hPN:prQ/M/PwOGqJRRNtP4cteCD
- TLSH T1A2B833857C5FF10C10A758593BCCC5BE7724DB11C3178FE926A0CBB6E61B9632E2219A
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4148 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4148 7zFM.exe Token: 35 4148 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4148 7zFM.exe
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Ryanherrick_ULTIMATE STARTER PACK_AIMERSHIN.rar"1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:4148