Overview
overview
10Static
static
3dc87cc13ba...28.exe
windows11-ltsc_2024-x64
10$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDIR/app-64.7z
windows11-ltsc_2024-x64
1Installer.exe
windows11-ltsc_2024-x64
10LICENSES.c...m.html
windows11-ltsc_2024-x64
3d3dcompiler_47.dll
windows11-ltsc_2024-x64
1ffmpeg.dll
windows11-ltsc_2024-x64
1libEGL.dll
windows11-ltsc_2024-x64
1libGLESv2.dll
windows11-ltsc_2024-x64
1resources/app/main.js
windows11-ltsc_2024-x64
3resources/elevate.exe
windows11-ltsc_2024-x64
3vk_swiftshader.dll
windows11-ltsc_2024-x64
1vulkan-1.dll
windows11-ltsc_2024-x64
1$PLUGINSDI...7z.dll
windows11-ltsc_2024-x64
3Analysis
- max time kernel
298s - max time network
132s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/08/2026, 03:16
Static task
static1
Behavioral task
behavioral1
Sample
dc87cc13bad5c4cc715ace4737ac6f303994a68ec8a772067da9765d642e1b28.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/app-64.7z
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Installer.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral6
Sample
LICENSES.chromium.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
d3dcompiler_47.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral8
Sample
ffmpeg.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral9
Sample
libEGL.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral10
Sample
libGLESv2.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
resources/app/main.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral12
Sample
resources/elevate.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
vk_swiftshader.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral14
Sample
vulkan-1.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win11ltsc2024-20260709-en
General
- Target $PLUGINSDIR/app-64.7z
- Size 79.6MB
- Sample260803-dstnesxfnf
- SHA256 7454dbe4384a65cc288f8a887cc64f6d80c03a7b907675702ce103323d53ff7e
- MD5 67b5fcd0f0d8d3d9612afaab2ee90f25
- SHA1 5e5477b30ca4b40b083115e3c6260ec346513236
- SHA512 2ae363df44437c07a3a7c6932cb53057fc4d65f916e08e894960bb70dd159495163de1011210136896c361fdcd175cd22ef5ae9899be3a7d5eaa8502801b4cc9
- SSDEEP 1572864:uLdkgowUngb6LtGKXpIMFIABZI48z2Fi/S8JKBUmy+N5Xe6EfB7V:u29ng6LQK5BaABZVPArg/bXeB7V
- TLSH T1ED0833D403D69A5AC24FAFED127F0FD3AD5A6EA0725D90BF42268432F29546BC58C04F
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1540 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1540 7zFM.exe Token: 35 1540 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1540 7zFM.exe