dfbc9e77f7d25aef102710c98f82a4f3b91b8bbd01f18d3b0781abb87c68bf2d

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 00:21

Target
[email protected]
Size 81KB
Sample260730-ankyyahc59
SHA256 dfbc9e77f7d25aef102710c98f82a4f3b91b8bbd01f18d3b0781abb87c68bf2d
MD5 1ee09aa34a227ba9ed9cf4dd1dfc5e13
SHA1 153bf018ff3e1487c98937c83242f3ed9bd199df
SHA512 38422805c99a5163b50abe413d74eed2c6470ef116fd0b8cb075b77e0efa6c2138916d7cff0792e51aacd5e603a0e8db2720189e51349a84c124e6bd6e0f7e1f
SSDEEP 768:JrdPtrwjI+r2HQ5ze/i2ZaikohKr0u6CwIf2HTKp:FrwHuanoWp
TLSH
T13E834332B1F1911DDC52127EA6E9BC82689B3CC75BE46540FD9ED3341B4BB2860BD683
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
6960	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	6960	7zFM.exe
Token: 35	6960	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
6960	7zFM.exe