68e962c4706f6bcfae0e0a04f30b982ba4e5f1e954da2393b162cc37f7c36d7f

Login
Reports

Overview

overview

Static

static

kodi.zip.7z

windows11-ltsc_2024-x64

kodi.zip

windows11-ltsc_2024-x64

kodi\addon...se.xml

windows11-ltsc_2024-x64

kodi\addon...4a.xml

windows11-ltsc_2024-x64

kodi\addon...6a.xml

windows11-ltsc_2024-x64

kodi\addon...2a.xml

windows11-ltsc_2024-x64

kodi\addon...6a.xml

windows11-ltsc_2024-x64

kodi\addon...6a.xml

windows11-ltsc_2024-x64

kodi\addon...5a.xml

windows11-ltsc_2024-x64

kodi\addon...4a.xml

windows11-ltsc_2024-x64

kodi\addon...4a.xml

windows11-ltsc_2024-x64

kodi\addon...4a.xml

windows11-ltsc_2024-x64

kodi\addon...0a.xml

windows11-ltsc_2024-x64

kodi\addon...6a.xml

windows11-ltsc_2024-x64

kodi\addon...5a.xml

windows11-ltsc_2024-x64

kodi\addon...6a.xml

windows11-ltsc_2024-x64

kodi\addon...6a.xml

windows11-ltsc_2024-x64

kodi\addon...6a.xml

windows11-ltsc_2024-x64

kodi\addon...6a.xml

windows11-ltsc_2024-x64

kodi\addon...6a.xml

windows11-ltsc_2024-x64

kodi\addon...3a.xml

windows11-ltsc_2024-x64

kodi\addon...3a.xml

windows11-ltsc_2024-x64

kodi\addon...4a.xml

windows11-ltsc_2024-x64

kodi\addon...4a.xml

windows11-ltsc_2024-x64

kodi\addon...4a.xml

windows11-ltsc_2024-x64

kodi\addon...6b.xml

windows11-ltsc_2024-x64

kodi\addon...8a.xml

windows11-ltsc_2024-x64

kodi\addon...4a.xml

windows11-ltsc_2024-x64

kodi\addon...2a.xml

windows11-ltsc_2024-x64

kodi\addon...6a.xml

windows11-ltsc_2024-x64

kodi\addon...2a.xml

windows11-ltsc_2024-x64

kodi\addon...5a.xml

windows11-ltsc_2024-x64

Analysis

max time kernel
26s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 12:57

Sharing

Copy URL Twitter E-mail

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

kodi.zip.7z

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

900 seconds

Behavioral task

behavioral2

Sample

kodi.zip

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral3

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\application\Mouse.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral4

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\cocoa\8Bitdo_Zero_GamePad_v05A0_p3232_16b_4a.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

Behavioral task

behavioral5

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\cocoa\DUALSHOCK_4_Wireless_Controller_v054C_p09CC_14b_6a.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral6

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\cocoa\GamePad_Pro_USB_v0428_p4001_10b_2a.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

adware persistence ransomware spyware

Behavioral task

behavioral7

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\cocoa\Gamepad_F310_v046D_pC21D_15b_6a.xml

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral8

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\cocoa\Generic_USB_Joystick_v0079_p0006_12b_6a.xml

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral9

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\cocoa\Logitech_Dual_Action_v046D_pC216_12b_5a.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral10

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\cocoa\PC_USB_Wired_Stick_8838_v0738_p8838_13b_4a.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral11

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\cocoa\PLAYSTATION_R_3_Controller_v054C_p0268_19b_4a.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

adware persistence ransomware spyware

Behavioral task

behavioral12

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\cocoa\PS_R__Ga_epad_v054C_p0268_19b_4a.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

adware persistence ransomware spyware

Behavioral task

behavioral13

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\cocoa\USB_GamePad_v0E8F_p3013_16b_10a.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

adware persistence ransomware spyware

Behavioral task

behavioral14

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\cocoa\USB_Gamepad_v0079_p0011_10b_6a.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral15

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\cocoa\USB_Joystick_v0E8F_p0003_12b_5a.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral16

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\cocoa\Wireless_360_Controller_v045E_p028E_15b_6a.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

adware persistence ransomware spyware

Behavioral task

behavioral17

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\cocoa\Wireless_Controller_v054C_p09CC_14b_6a.xml

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral18

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\cocoa\Xbox_360_Wired_Controller_v045E_p028E_15b_6a.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

adware persistence ransomware spyware

Behavioral task

behavioral19

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\cocoa\Xbox_360_Wired_Controller_v046D_pC21D_15b_6a.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

adware persistence ransomware spyware

Behavioral task

behavioral20

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\cocoa\Xbox_One_Wired_Controller_v045E_p02DD_15b_6a.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

adware persistence ransomware spyware

Behavioral task

behavioral21

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\cocoa\usb_gamepad____________v0810_pE501_10b_3a.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral22

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\cocoa\usb_gamepad_v0810_pE501_10b_3a.xml

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral23

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\darwinembedded\Extended_Gamepad_13b_4a.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral24

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\darwinembedded\Extended_Gamepad_15b_4a.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

adware persistence ransomware spyware

Behavioral task

behavioral25

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\darwinembedded\Extended_Gamepad_16b_4a.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

adware persistence ransomware spyware

Behavioral task

behavioral26

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\darwinembedded\Micro_Gamepad_6b.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

adware persistence ransomware spyware

Behavioral task

behavioral27

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\directinput\4-PLAY_PORT.1_v16D0_p0D04_24b_1h_8a.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral28

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\directinput\4_axis_16_button_joystick_v6666_p0667_16b_4a.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

adware persistence ransomware spyware

Behavioral task

behavioral29

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\directinput\Adaptoid_v06F7_p1_14b_2a.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

adware persistence ransomware spyware

Behavioral task

behavioral30

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\directinput\Bluetooth_HID_Port_v05A0_p3232_16b_1h_6a.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral31

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\directinput\GamePad_Pro_USB_v0428_p4001_10b_2a.xml

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral32

Sample

kodi\addons\peripheral.joystick\resources\buttonmaps\xml\directinput\Generic_USB_Joystick_v0079_p0006_12b_1h_5a.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Report Analysis Logs

General

Target
kodi.zip.7z
Size 125.0MB
Sample260730-p7ectsycmg
SHA256 68e962c4706f6bcfae0e0a04f30b982ba4e5f1e954da2393b162cc37f7c36d7f
MD5 1c7b58b0e58da3e9373fa9afcc8cc6af
SHA1 0b7e0bb306fd3b41a22f31e7df7715dc22106863
SHA512 f1f710683d5b8c098e2d9852ad71bedd3e937f646b95365257c262dfe0de9b2cbf4e713b5ce7cefdda7be9a068d395c3cbbdd14d28e89ebf5e940892d65ab4e9
SSDEEP 3145728:afoiQLa1J324B888ZJhoU+nhSLvEaakfAplA:A2CJ324BmJhoUYhSLvEalA
TLSH
T17D5833E89420C1DD950D870035EF73761D0FABE65D9F292D183DA6C2C9FC86CD28EA66
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4640	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	4640	7zFM.exe
Token: 35	4640	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4640	7zFM.exe

Processes

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\kodi.zip.7z"
1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:4640

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads