Overview
overview
6Static
static
1glock bot.rar
windows10-ltsc_2021-x64
1glock bot.rar
windows10-2004-x64
1glock bot.rar
windows11-21h2-x64
1glock bot.rar
windows11-ltsc_2024-x64
1glock bot/...ce.png
windows10-ltsc_2021-x64
1glock bot/...ce.png
windows10-2004-x64
1glock bot/...ce.png
windows11-21h2-x64
glock bot/...ce.png
windows11-ltsc_2024-x64
1glock bot/...ing.py
windows10-ltsc_2021-x64
3glock bot/...ing.py
windows10-2004-x64
3glock bot/...ing.py
windows11-21h2-x64
3glock bot/...ing.py
windows11-ltsc_2024-x64
3glock bot/sound.wav
windows10-ltsc_2021-x64
1glock bot/sound.wav
windows10-2004-x64
6glock bot/sound.wav
windows11-21h2-x64
6glock bot/sound.wav
windows11-ltsc_2024-x64
1Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
05/08/2026, 02:22
Static task
static1
Behavioral task
behavioral1
Sample
glock bot.rar
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral2
Sample
glock bot.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral3
Sample
glock bot.rar
Resource
win11-20260513-en
Behavioral task
behavioral4
Sample
glock bot.rar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
glock bot/glock_face.png
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral6
Sample
glock bot/glock_face.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
glock bot/glock_face.png
Resource
win11-20260513-en
Behavioral task
behavioral8
Sample
glock bot/glock_face.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
glock bot/glock_pet_walking.py
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral10
Sample
glock bot/glock_pet_walking.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
glock bot/glock_pet_walking.py
Resource
win11-20260513-en
Behavioral task
behavioral12
Sample
glock bot/glock_pet_walking.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
glock bot/sound.wav
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral14
Sample
glock bot/sound.wav
Resource
win10v2004-20260513-en
Behavioral task
behavioral15
Sample
glock bot/sound.wav
Resource
win11-20260513-en
Behavioral task
behavioral16
Sample
glock bot/sound.wav
Resource
win11ltsc2024-20260709-en
General
- Target glock bot.rar
- Size 948KB
- Sample260805-ctv27scb22
- SHA256 5ba558c8d6aa1a6fb2b8ac4ff76c946409e2eeed4253f3bd9606e38f7445e1cf
- MD5 2787a903642889fdf6665773ea81ce79
- SHA1 cf78e041bb2e1d9d9dee1b2e0a95a88164d70698
- SHA512 52b976c06119f69129c171bfa485175b59cefc990f8f5f97a54c02e5bfda03a365789700586312773a53206395748d127329ec153b480c2a481ae6ebaf26fac7
- SSDEEP 24576:fsJjaja5uV1Sta/P2rbUXV/KTvQCryOZvQoK2a0wCQEeozXt1:fsUW5uP7eMRKTIC2OZvQl2a0wCvzr
- TLSH T1822523D2FAADE22BFF6AF7949815A9A22F09CD775395C3F301375EA027078210913749
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4336 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4336 7zFM.exe Token: 35 4336 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4336 7zFM.exe