Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
06/08/2026, 23:20
Static task
static1
Behavioral task
behavioral1
Sample
SJTweaks Controller Macro cracked by tank230.rar
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
SJTweaks Controller Macro cracked by tank230.rar
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target SJTweaks Controller Macro cracked by tank230.rar
- Size 115.7MB
- Sample260806-3br6pscg66
- SHA256 3c8f5b3b6e8f0ba2a76a5417717b8de7ddf218344d0c59563ac2ba91e2996a99
- MD5 d37f2191262fd28196773372eb94e790
- SHA1 c20cb3746b183f0ce1e08cee35c35daff660173c
- SHA512 e4015be99fcef94c1055cffeaf37ca4ddc41bc14e17846d961e6ea746c6ac609e8e13bedae1a175c27cbb93c5c6408c92de9a9f59338d0477d193f75e30b6442
- SSDEEP 3145728:sABEHyVZwxZkBaR0xHnHahsB5Nuc1yhkCu:FBEzxF0H5B3uceu
- TLSH T1644833009BF0CD14536636ABE4239579A8AACFD0DF7D4FCD4A49728C0B2D4B5A0F696C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1304 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1304 7zFM.exe Token: 35 1304 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1304 7zFM.exe
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\SJTweaks Controller Macro cracked by tank230.rar"1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:1304