Analysis
- max time kernel
148s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
29/07/2026, 07:56
Static task
static1
Behavioral task
behavioral1
Sample
CCS Universal EXT.rar
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
CCS Universal EXT.rar
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target CCS Universal EXT.rar
- Size 763KB
- Sample260729-js4raafa87
- SHA256 6dbed299a969a0497829064e4e112419af48293b8b469ed7f03e6c395a587f83
- MD5 aca6446b4eb0caac73d7dc162981bda4
- SHA1 5c9319ba14fdf15062258b5b3ea41cdb8e351afb
- SHA512 3bfba557310034812988d17beb0b263dea574e2d8f5b8a070d34f5be6e3751c043d3b9a53e9ef760b5795c1f3daf5112c28197909f67c25375d5b03f772b00b8
- SSDEEP 12288:rgXB4Kt4ICtQtV7dW8bz6z8KC3nBYHCDXsL2a/Hrjnu9w1r:rKqQtC8bz1JYiD8Sa/Hro4
- TLSH T1E1F4233D5A485F8CDC6AA206D5B814CE6B5B549DBE567E2B0A3DFEE3C0320AD1B53103
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2420 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2420 7zFM.exe Token: 35 2420 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2420 7zFM.exe