Analysis
- user interaction
yes - max time kernel
114s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/08/2026, 13:04
Static task
static1
Behavioral task
behavioral1
Sample
rock_projects_salzkammergut_pdf.7z
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
rock_projects_salzkammergut_pdf.7z
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target rock_projects_salzkammergut_pdf.7z
- Size 4.5MB
- Sample260808-qa75ba1xdy
- SHA256 7c92408ee85f3ef6611aca5a195028bb4eb81d6dd8c62e47c3f876ab57b90a10
- MD5 9cad730e50980b4bf2a65feafd2e0590
- SHA1 38993ebe738a10ef189fc1be68b7b8366a5f4c40
- SHA512 1568a688b427f6ef575d3a7c34bce7f429d1a1f5f34543ce47d95ad5999277019a87ee74eb52d358028149db22f04ddc1138f57de2baa2003640d57c43144631
- SSDEEP 98304:sG7qnaasrPSr8NU00fR988on1Ej5EuhF/1wz+OAqQ:sGGnc2gKfZO/1EVEuhF/1Jb
- TLSH T1FE263376022BB12D89FBB1B4938DA2854CF07B737C1257C0FBF954A2480C989AEE755D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3180 7zFM.exe Token: 35 3180 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3180 7zFM.exe