2ec7dc821c42319d0feafc9da209cf7dc89ba78ebccbfe009080a1f1709ee6fb

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/08/2026, 04:17

Target
tidal login go.rar
Size 4.3MB
Sample260802-ewpdjsvbjb
SHA256 2ec7dc821c42319d0feafc9da209cf7dc89ba78ebccbfe009080a1f1709ee6fb
MD5 129e89c843ce28792ea84014112cb495
SHA1 be518d3eadcec004286257e6207a904d36e6362b
SHA512 88c7dfd7683df8ffd4b4337b9843b70e277a59b709bce0616f58ca08237c328c51ae39ad4e5d79c22fa8056155b4bb44fde914a365bff276a9dfc75145162597
SSDEEP 98304:DkFc7+AsjlgSSbz6EL1jPRqmZEGD8Ncp/aqXo2JsTr5EWG5MFLD:D44+AsjlpSbz6ELxpRxDsn0ojr5EWG5W
TLSH
T1D326337BC6754B6418FA97406EE181A11CB8B38EECEBC34B851392568F76D008771BE9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3036	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	3036	7zFM.exe
Token: 35	3036	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3036	7zFM.exe