Analysis
- geolocation tags
nanew-jerseynorth-americaunited-statesususa - max time kernel
148s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/07/2026, 15:08
Static task
static1
Behavioral task
behavioral1
Sample
anotheroaktree-foxglovebuilds.gz
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
anotheroaktree-foxglovebuilds.gz
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
anotheroaktree-foxglovebuilds.schem
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
anotheroaktree-foxglovebuilds.schem
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target anotheroaktree-foxglovebuilds.gz
- Size 1KB
- Sample260730-sjd9psbr6s
- SHA256 dddce5feed2fd5779e32db6f659e556d57906a14dcaada2bf4fe582c4593408b
- MD5 8f190150be69201faf4f85bdad10c562
- SHA1 22cc8929e35231238099c8cb2ba9426d7e77fa0e
- SHA512 b4b557be9459b76c4dbca220ec6c34f2d2e294b9daea0bacc93ae42408027e9e265c2ab149c0285393e8e3d7e4f314ecaa42e73bd04d9160ef919f752e365bff
- TLSH T1CE219695A865E802F5440F74E5060FA4DDA58694EA867CEB5C0514272C3A9D7FEE8888
- MD5 SHA1 SHA512 TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3412 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3412 7zFM.exe Token: 35 3412 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3412 7zFM.exe