Analysis
- max time kernel
252s - max time network
201s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
09/08/2026, 23:12
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Freebuff-0.0.52-win-x64.exe
Resource
win10ltsc2021-20260513-en
22 signatures
900 seconds
Behavioral task
behavioral2
Sample
$PLUGINSDIR/app-64.7z
Resource
win10ltsc2021-20260513-en
3 signatures
900 seconds
General
- Target $PLUGINSDIR/app-64.7z
- Size 112.9MB
- Sample260809-269hssxbpg
- SHA256 feebd50e404b7554f293b122ebeabdc0362412a628c2bcc6630535d1fafe5bcd
- MD5 1d6bd93476634d42812fac5875101993
- SHA1 99a8f648bb54e0bdf02e29438816d01e84d3fd4e
- SHA512 306d9d61afbc7859e6d41f2a0153f4da84efb9de50403547df0b40e68ddace5feaa7c22c8f41d4f7ac282abf662425290562d283400e5c41f746d9a480851b70
- SSDEEP 1572864:vqjE1BNShFRRvmUMBGh1Xq/q8vUUoYtX2lijbVkB+Max/1Tvg0vDobuPVrLT:ikgnHWBG/p8vUUdjRO3eJvg0vDKyV3
- TLSH T100483395741178A25605DEB3A7DEBD438BC34D06BF820C8AB3EBF838FF082565066795
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4664 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4664 7zFM.exe Token: 35 4664 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4664 7zFM.exe