Overview
overview
3Static
static
1dx12-rainb...in.rar
windows10-2004-x64
1dx12-rainb...in.rar
windows11-ltsc_2024-x64
1dx12-rainb....vsidx
windows10-2004-x64
3dx12-rainb....vsidx
windows11-ltsc_2024-x64
3dx12-rainb....vsidx
windows10-2004-x64
3dx12-rainb....vsidx
windows11-ltsc_2024-x64
3dx12-rainb....vsidx
windows10-2004-x64
3dx12-rainb....vsidx
windows11-ltsc_2024-x64
3dx12-rainb....vsidx
windows10-2004-x64
3dx12-rainb....vsidx
windows11-ltsc_2024-x64
3dx12-rainb...8/.suo
windows10-2004-x64
3dx12-rainb...8/.suo
windows11-ltsc_2024-x64
3dx12-rainb....VC.db
windows10-2004-x64
3dx12-rainb....VC.db
windows11-ltsc_2024-x64
3dx12-rainb...p.json
windows10-2004-x64
3dx12-rainb...p.json
windows11-ltsc_2024-x64
3dx12-rainb...t.json
windows10-2004-x64
3dx12-rainb...t.json
windows11-ltsc_2024-x64
3dx12-rainb...st.bin
windows10-2004-x64
3dx12-rainb...st.bin
windows11-ltsc_2024-x64
3dx12-rainb...R.ipch
windows10-2004-x64
3dx12-rainb...R.ipch
windows11-ltsc_2024-x64
3dx12-rainb...K.ipch
windows10-2004-x64
3dx12-rainb...K.ipch
windows11-ltsc_2024-x64
3dx12-rainb...N.ipch
windows10-2004-x64
3dx12-rainb...N.ipch
windows11-ltsc_2024-x64
3dx12-rainb...A.ipch
windows10-2004-x64
3dx12-rainb...A.ipch
windows11-ltsc_2024-x64
3dx12-rainb...R.ipch
windows10-2004-x64
3dx12-rainb...R.ipch
windows11-ltsc_2024-x64
3dx12-rainb...K.ipch
windows10-2004-x64
3dx12-rainb...K.ipch
windows11-ltsc_2024-x64
3Analysis
- max time kernel
150s - max time network
158s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/08/2026, 10:38
Static task
static1
Behavioral task
behavioral1
Sample
dx12-rainbow6-internal-main.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
dx12-rainbow6-internal-main.rar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
dx12-rainbow6-internal-main/.vs/rb6/FileContentIndex/0320a3a5-2a62-4716-be39-8fb8e76933bb.vsidx
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
dx12-rainbow6-internal-main/.vs/rb6/FileContentIndex/0320a3a5-2a62-4716-be39-8fb8e76933bb.vsidx
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral5
Sample
dx12-rainbow6-internal-main/.vs/rb6/FileContentIndex/38c1672a-d8d5-4ee4-ab37-0863fa0d0816.vsidx
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
dx12-rainbow6-internal-main/.vs/rb6/FileContentIndex/38c1672a-d8d5-4ee4-ab37-0863fa0d0816.vsidx
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
dx12-rainbow6-internal-main/.vs/rb6/FileContentIndex/8167e865-cabd-4272-8e45-c11606179da4.vsidx
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
dx12-rainbow6-internal-main/.vs/rb6/FileContentIndex/8167e865-cabd-4272-8e45-c11606179da4.vsidx
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
dx12-rainbow6-internal-main/.vs/rb6/FileContentIndex/aaebe2ec-e3b5-4793-b031-46890b512779.vsidx
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
dx12-rainbow6-internal-main/.vs/rb6/FileContentIndex/aaebe2ec-e3b5-4793-b031-46890b512779.vsidx
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
dx12-rainbow6-internal-main/.vs/rb6/v18/.suo
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
dx12-rainbow6-internal-main/.vs/rb6/v18/.suo
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
dx12-rainbow6-internal-main/.vs/rb6/v18/Browse.VC.db
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
dx12-rainbow6-internal-main/.vs/rb6/v18/Browse.VC.db
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
dx12-rainbow6-internal-main/.vs/rb6/v18/DocumentLayout.backup.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
dx12-rainbow6-internal-main/.vs/rb6/v18/DocumentLayout.backup.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
dx12-rainbow6-internal-main/.vs/rb6/v18/DocumentLayout.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
dx12-rainbow6-internal-main/.vs/rb6/v18/DocumentLayout.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
dx12-rainbow6-internal-main/.vs/rb6/v18/fileList.bin
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
dx12-rainbow6-internal-main/.vs/rb6/v18/fileList.bin
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral21
Sample
dx12-rainbow6-internal-main/.vs/rb6/v18/ipch/AutoPCH/138884bcfa5d6577/DISASSEMBLER.ipch
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
dx12-rainbow6-internal-main/.vs/rb6/v18/ipch/AutoPCH/138884bcfa5d6577/DISASSEMBLER.ipch
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
dx12-rainbow6-internal-main/.vs/rb6/v18/ipch/AutoPCH/1f75a0904567f2cf/HOOK.ipch
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
dx12-rainbow6-internal-main/.vs/rb6/v18/ipch/AutoPCH/1f75a0904567f2cf/HOOK.ipch
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
dx12-rainbow6-internal-main/.vs/rb6/v18/ipch/AutoPCH/23571e2e72c984f7/DLLMAIN.ipch
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
dx12-rainbow6-internal-main/.vs/rb6/v18/ipch/AutoPCH/23571e2e72c984f7/DLLMAIN.ipch
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
dx12-rainbow6-internal-main/.vs/rb6/v18/ipch/AutoPCH/282526f16b257599/DECODERDATA.ipch
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
dx12-rainbow6-internal-main/.vs/rb6/v18/ipch/AutoPCH/282526f16b257599/DECODERDATA.ipch
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
dx12-rainbow6-internal-main/.vs/rb6/v18/ipch/AutoPCH/5f79e0e599974b19/DECODER.ipch
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
dx12-rainbow6-internal-main/.vs/rb6/v18/ipch/AutoPCH/5f79e0e599974b19/DECODER.ipch
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
dx12-rainbow6-internal-main/.vs/rb6/v18/ipch/AutoPCH/676940721fe1e96e/D3D12HOOK.ipch
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
dx12-rainbow6-internal-main/.vs/rb6/v18/ipch/AutoPCH/676940721fe1e96e/D3D12HOOK.ipch
Resource
win11ltsc2024-20260709-en
General
- Target dx12-rainbow6-internal-main.rar
- Size 259.6MB
- Sample260809-mpxeksdp4s
- SHA256 46f0dc2335fb50e21003349817d0699127a32e3204a997757ed2e5ea89082de7
- MD5 612d97db3e41a06ddab8bf7363b972fc
- SHA1 f6d8e29dd9513c6403e49017a514f494c224aae2
- SHA512 645d380c4c02518dc90dca1ce00dd9ba0cab2fa623a2455ac236b7d4676e86739a859e514193a6f7fb12c6d7dcd83844e49bc2d2c86b30457ab9d306e441ecea
- SSDEEP 6291456:rldaSjFp/CTm5KYBQjW574kQRx2cUWPtnMxZRwIJg10qz:/Jp/CnYBQqZ4N2SJf0Q
- TLSH T18FD833D5589172EF9CE25D2D0205851CCB61ABC996E8F1C2B03FDB1D928E0E391EFD4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5200 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 5200 7zFM.exe Token: 35 5200 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5200 7zFM.exe