Analysis
- max time kernel
148s - max time network
147s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/07/2026, 19:39
Behavioral task
behavioral1
Sample
New folder.rar
Resource
win10v2004-20260513-en
22 signatures
150 seconds
Behavioral task
behavioral2
Sample
New folder.rar
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target New folder.rar
- Size 16.2MB
- Sample260730-yc69ssfl9v
- SHA256 c5099e7bd4a63581755c0cda59324f651d646cfab49668b967612f898645731f
- MD5 6ed3c78835481d1b69a2fd804a24e021
- SHA1 3d70f65a8bb0e002c4a94634ab3c2807f3d1a041
- SHA512 2eaa8f8ad30830fd58969a7263af82ec34420c3656eedda102b88a177c7b55a55e60a8db0d6d31d956fda346294a287a5405f55edae4a0b8fe3b68131ad32f3b
- SSDEEP 393216:EBVb9UCPjkl6NPhLpQfA1deDAgQlByjZHvYhiB2yvB9:Y9nLM6PLdaUHl4FPYhiYyvf
- TLSH T1B90733AFC70CA159BDADAD0DAB9507747CF93D36B9503D2DB29324E4638A18069C708F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5920 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 5920 7zFM.exe Token: 35 5920 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5920 7zFM.exe