Analysis
- max time kernel
148s - max time network
21s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
01/08/2026, 18:00
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
release.rar
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
release.rar
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target release.rar
- Size 45.2MB
- Sample260801-wlkfaaee94
- SHA256 b9dd74f8f1992ba6f62062a7d4922c02a00826048d6dbe1d30b946de37c52c6e
- MD5 6c60373ec6c4de75481d03a38471ee4e
- SHA1 f88a1587dc95f5f19cb1fc588a8ee261e665ea1c
- SHA512 dafe0daf15306aa1eba132858895e9ebdf2ed380f3723320c21b6a6c2b9e8bbb489b70fb484b603d351fac86e1a157a1ee3932c8fbea39432243153443c9e569
- SSDEEP 786432:4/OhctXlVltaj/IDNsDSa6hMPPw8yJXnct6e6UuIHPO8xeqGtgSMDx4mjeh:zhctF+ApLjqWnnU9P/ItgvUh
- TLSH T190A73383FFEE762BC95BCD19A3429E22A76D768458224B0FA7727214F5B55023C1C273
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2780 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2780 7zFM.exe Token: 35 2780 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2780 7zFM.exe