5729c1c457c47b18c4032648cd16c039749c4f0b3117eb2f5654073df7d7cec0

Analysis

max time kernel
900s
max time network
542s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 03:14

Target
tele.rar
Size 221.8MB
Sample260730-drkn5a1zhy
SHA256 5729c1c457c47b18c4032648cd16c039749c4f0b3117eb2f5654073df7d7cec0
MD5 fca09a0d299d613d4a26ce9e60aeded5
SHA1 e42e632cf97fe492b3434627d702fb7bbfcf067a
SHA512 2c308b4ad2d7f5d1ff81a623178dedc4c9a4909b7bb3d4f62f4245a6e2ce92b569ac74159b5b4a07d67f15433781d83bba6ef1a817e6852e219fc773943a3941
SSDEEP 3145728:2hdGZFEa+wxWIB6BVY0Br8g8dQ45UQyRhC7Fi7zEQAjG268sVT3aDmDtHE:AdazxCXzCXUhC7FEzEQFLfVTKDAtHE
TLSH
T132B8332778C76F47DC09970AE4A4054D876BC7822201F077F1B7BDE3B41EAA56AB94C2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5244	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	5244	7zFM.exe
Token: 35	5244	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5244	7zFM.exe

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:3516

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:4120