7b144362c494d15657b5961adc9ea215952e98dd9637a1db1b42c39eab11aab0

Analysis

geolocation tags

cacanadananorth-americatoronto
user interaction
yes
max time kernel
148s
max time network
116s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/07/2026, 06:20

Target
anonhax.rar
Size 7.9MB
Sample260728-g32csscn5w
SHA256 7b144362c494d15657b5961adc9ea215952e98dd9637a1db1b42c39eab11aab0
MD5 5088fe5e63b55efe34eb313e0792ebd4
SHA1 166a190639db09d8b6ee2fbd1d17b86526cf83df
SHA512 3b4ae3fa729b4cd6cfe386ac5ca1ad5ebabf8a89260acba2b68bbdfa8b6b5baf78a1dc069e3b72a7011596601b48c98f485093762f3bb5147422620fee2f8e68
SSDEEP 196608:Yuc1nphBpCqxuO9YpWdNiwmigt7YLRa75y/2J7r709r8Bvj46+U9dSnJ:YRXbpC0uJpWdNrtC5y/Qr70B8v0jU9QJ
TLSH
T1108633C46BF67D2FEE69E917990870F3EC810E90098BCA8D6E618476736C847F08F556
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}\Instance\	7zFM.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{374DE290-123F-4565-9164-39C4925E467B}\Instance\	7zFM.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}\Instance\	7zFM.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	7zFM.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A0953C92-50DC-43bf-BE83-3742FED03C9C}\Instance\	7zFM.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4928	7zFM.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
4928	7zFM.exe
4928	7zFM.exe

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4296