fecfc3d3a070487f25e4e987761f7413282ab984008c19d2229f23bad99aba77

Login
Reports

Overview

overview

Static

static

Fly.Corp.B...lic.7z

windows10-2004-x64

Fly.Corp.B...lic.7z

windows11-ltsc_2024-x64

Fly.Corp.B...5.ress

windows10-2004-x64

Fly.Corp.B...5.ress

windows11-ltsc_2024-x64

Fly.Corp.B...level6

windows10-2004-x64

Fly.Corp.B...level6

windows11-ltsc_2024-x64

Fly.Corp.B...level7

windows10-2004-x64

Fly.Corp.B...level7

windows11-ltsc_2024-x64

Fly.Corp.B...assets

windows10-2004-x64

Fly.Corp.B...assets

windows11-ltsc_2024-x64

Fly.Corp.B...s.ress

windows10-2004-x64

Fly.Corp.B...s.ress

windows11-ltsc_2024-x64

Fly.Corp.B...assets

windows10-2004-x64

Fly.Corp.B...assets

windows11-ltsc_2024-x64

Fly.Corp.B...s.ress

windows10-2004-x64

Fly.Corp.B...s.ress

windows11-ltsc_2024-x64

Fly.Corp.B...assets

windows10-2004-x64

Fly.Corp.B...assets

windows11-ltsc_2024-x64

Fly.Corp.B...s.ress

windows10-2004-x64

Fly.Corp.B...s.ress

windows11-ltsc_2024-x64

Fly.Corp.B...source

windows10-2004-x64

Fly.Corp.B...source

windows11-ltsc_2024-x64

Fly.Corp.B...assets

windows10-2004-x64

Fly.Corp.B...assets

windows11-ltsc_2024-x64

Fly.Corp.B...s.ress

windows10-2004-x64

Fly.Corp.B...s.ress

windows11-ltsc_2024-x64

Fly.Corp.B...source

windows10-2004-x64

Fly.Corp.B...source

windows11-ltsc_2024-x64

Fly.Corp.B...assets

windows10-2004-x64

Fly.Corp.B...assets

windows11-ltsc_2024-x64

Fly.Corp.B...s.ress

windows10-2004-x64

Fly.Corp.B...s.ress

windows11-ltsc_2024-x64

Analysis

max time kernel
150s
max time network
156s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 21:59

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Fly.Corp.Build.24148984.Win64.Public.7z

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

Fly.Corp.Build.24148984.Win64.Public.7z

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/level5.ress

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral4

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/level5.ress

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral5

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/level6

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral6

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/level6

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral7

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/level7

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral8

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/level7

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral9

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/resources.assets

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

execution ransomware

Behavioral task

behavioral10

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/resources.assets

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral11

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/resources.assets.ress

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral12

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/resources.assets.ress

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral13

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/sharedassets0.assets

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral14

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/sharedassets0.assets

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral15

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/sharedassets0.assets.ress

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral16

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/sharedassets0.assets.ress

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral17

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/sharedassets1.assets

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral18

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/sharedassets1.assets

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral19

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/sharedassets1.assets.ress

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral20

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/sharedassets1.assets.ress

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral21

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/sharedassets1.resource

Resource

win10v2004-20260513-en

windows10-2004-x64

15 signatures

150 seconds

discovery execution

Behavioral task

behavioral22

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/sharedassets1.resource

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral23

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/sharedassets2.assets

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral24

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/sharedassets2.assets

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral25

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/sharedassets2.assets.ress

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral26

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/sharedassets2.assets.ress

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral27

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/sharedassets2.resource

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral28

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/sharedassets2.resource

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral29

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/sharedassets3.assets

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral30

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/sharedassets3.assets

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral31

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/sharedassets3.assets.ress

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral32

Sample

Fly.Corp.Build.24148984.Win64.Public/steamapps/common/Fly Corp/Fly Corp_Data/sharedassets3.assets.ress

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Report Analysis Logs

General

Target
Fly.Corp.Build.24148984.Win64.Public.7z
Size 114.7MB
Sample260804-1we1rs1eld
SHA256 fecfc3d3a070487f25e4e987761f7413282ab984008c19d2229f23bad99aba77
MD5 3e40cd7e854ac7ea02b0cd84cd1c738b
SHA1 b90857610cdf5a29efd797e52b3bab50be109bbf
SHA512 45a61f4634838a448cb576aa5962305cd1e8706c2263418912bb84af4530e6db9f20de1d89be8db212dca86ecf8f582dc526462adac38327d93e60042ddd1790
SSDEEP 3145728:czglpm0wx05meeC9oNZUzq6fcCOiKc+B4Gha0:6glpt8qiN96fcCOGGha0
TLSH
T1AD48331257EF4E5BB8AC571584266C38E4CE1F092E219AD4E587CDED6FFCA00E0F5A18
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	2652	7zFM.exe
Token: 35	2652	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2652	7zFM.exe

Processes

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Fly.Corp.Build.24148984.Win64.Public.7z"
1⤵
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:2652

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads