Analysis
- user interaction
yes - max time kernel
50s - max time network
23s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
28/07/2026, 00:38
Behavioral task
behavioral1
Sample
Release (1).rar
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
Release (1).rar
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
driver.sys
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
map.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
map.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
selium.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral7
Sample
selium.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
General
- Target Release (1).rar
- Size 6.1MB
- Sample260728-azelasvdjb
- SHA256 256c193278c79b8e7a63d2cbafc3c5b6f563e81c4d289875279e2bdc471a6ebd
- MD5 5a495f84658d90da1c7c6f1ab92d0474
- SHA1 69aefec41e2794189db6fb6bf24a3033e0f03969
- SHA512 7b56dee53dd82b9ab4bad4b3ec57017ac8e16151551f543d1eeae595d2781fae0eef4f4fe944590c6961a45e8dcbb8828d2240c36d47ef9acd39fc30bd7db102
- SSDEEP 196608:zNW/a9bB6jViqABOqXJ8Azcf5fxfGYfHmIRNN/c:MS9d6Xq5EfxeYfHmIR7c
- TLSH T17D56332277C19E6DD29606BE06CC789FD0BFD86825EACCDA3F158B3B60D918594F81C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4808 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4808 7zFM.exe Token: 35 4808 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4808 7zFM.exe