693ee39a219641de6bd6d5c2074da057ce938e0b4c37dfba29d66af187971f3c

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/07/2026, 03:43

Target
spoofer.7z
Size 716KB
Sample260729-eafjhsv1bv
SHA256 693ee39a219641de6bd6d5c2074da057ce938e0b4c37dfba29d66af187971f3c
MD5 11f3fe1a16d72c441965f836db3be5e9
SHA1 c778f88c5ebf777d30efcaad6686afd95a7f1d48
SHA512 30178ece8805df527117820e74c0f42e99dc70c44253656de854e77bbdd0d71f9a0426807d67881228f3637a4df8dfbf5e26b980aa7b2855e7f361dd7de6062b
SSDEEP 12288:LDzMbHGPnKlMirOwpA5X1hEb264ZPG0H8PnK3MJrOgpz5X1hEjZ:fEHnrOwpi1eVM/KrOgpl1ejZ
TLSH
T143F423974E138FCDA79D043583A97A61E60EF73EF64F3F41F0152A81190C0A99991FB9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings	7zFM.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings	OpenWith.exe

Suspicious behavior: GetForegroundWindowSpam 2 IoCs

pid	Process
4116	7zFM.exe
2952	OpenWith.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

Suspicious use of FindShellTrayWindow 5 IoCs

Suspicious use of SetWindowsHookEx 18 IoCs

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2540