163fcb5e17ad283bf888e7fd542b179d4f682e138f3d5bb35b5c649640aed6ce

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 04:31

Target
Soft.rar
Size 757KB
Sample260730-e5mlbabg46
SHA256 163fcb5e17ad283bf888e7fd542b179d4f682e138f3d5bb35b5c649640aed6ce
MD5 df72dd6b35ff4d0a46324a5749e5a5e7
SHA1 e18eec3c2692de68e3928a49df36fe7aac47c291
SHA512 4c2dd2cfc81e705e9e6a70f1390a2d95870a181808714f4144a7ea54c89f466176f040e3bb4ac426346f6d5f268d220a386c56904e4bccd6f0767ae7cb1c4096
SSDEEP 12288:/LKeAtcWVsgnkHQ2+7UwNBzmUuO3lvJi7kJ1SzSLJz7V/tpSEg0aMIpiuoyHDWJP:llWVjkHmYwfzmuJiIjaoZgtMEiu9HSq0
TLSH
T102F4231B2846126E680EE7871CB337CF11DABB9FC7005B4AB9516DDB2EDB2103563B58
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
908	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	908	7zFM.exe
Token: 35	908	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
908	7zFM.exe