Overview
overview
10Static
static
3v2.4.1.zip
windows11-21h2-x64
1v2.4.1.exe
windows11-21h2-x64
10$PLUGINSDI...er.dll
windows11-21h2-x64
3$PLUGINSDI...ls.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDIR/app-64.7z
windows11-21h2-x64
1Installer.exe
windows11-21h2-x64
10LICENSES.c...m.html
windows11-21h2-x64
3d3dcompiler_47.dll
windows11-21h2-x64
1ffmpeg.dll
windows11-21h2-x64
1libEGL.dll
windows11-21h2-x64
1libGLESv2.dll
windows11-21h2-x64
1locales/fa.pak
windows11-21h2-x64
3locales/fi.pak
windows11-21h2-x64
3locales/fil.pak
windows11-21h2-x64
3locales/fr.pak
windows11-21h2-x64
3locales/gu.pak
windows11-21h2-x64
3locales/he.pak
windows11-21h2-x64
3locales/hi.pak
windows11-21h2-x64
3locales/hr.pak
windows11-21h2-x64
3locales/hu.pak
windows11-21h2-x64
3locales/id.pak
windows11-21h2-x64
3locales/it.pak
windows11-21h2-x64
3resources/app/main.js
windows11-21h2-x64
3resources/elevate.exe
windows11-21h2-x64
3v8_context...ot.bin
windows11-21h2-x64
3vk_swiftshader.dll
windows11-21h2-x64
1vk_swiftsh...d.json
windows11-21h2-x64
3vulkan-1.dll
windows11-21h2-x64
1$PLUGINSDI...ec.dll
windows11-21h2-x64
3$PLUGINSDI...7z.dll
windows11-21h2-x64
3$R0/Uninst...er.exe
windows11-21h2-x64
7Analysis
- max time kernel
898s - max time network
452s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
09/08/2026, 14:49
Static task
static1
Behavioral task
behavioral1
Sample
v2.4.1.zip
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral2
Sample
v2.4.1.exe
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral3
Sample
$PLUGINSDIR/SpiderBanner.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral4
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral6
Sample
$PLUGINSDIR/app-64.7z
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral7
Sample
Installer.exe
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral8
Sample
LICENSES.chromium.html
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral9
Sample
d3dcompiler_47.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral10
Sample
ffmpeg.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral11
Sample
libEGL.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral12
Sample
libGLESv2.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral13
Sample
locales/fa.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral14
Sample
locales/fi.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral15
Sample
locales/fil.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral16
Sample
locales/fr.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral17
Sample
locales/gu.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral18
Sample
locales/he.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral19
Sample
locales/hi.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral20
Sample
locales/hr.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral21
Sample
locales/hu.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral22
Sample
locales/id.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral23
Sample
locales/it.pak
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral24
Sample
resources/app/main.js
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral25
Sample
resources/elevate.exe
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral26
Sample
v8_context_snapshot.bin
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral27
Sample
vk_swiftshader.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral28
Sample
vk_swiftshader_icd.json
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral29
Sample
vulkan-1.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral30
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral31
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral32
Sample
$R0/Uninstall Installer.exe
Resource
win11-20260513-en
windows11-21h2-x64
General
- Target $PLUGINSDIR/app-64.7z
- Size 82.2MB
- Sample260809-r7eppss1es
- SHA256 21b0abeecc3f1319a7080465ffa9af9d2c2a48705a3c5c1db51373eec99be8a5
- MD5 bd891b26235e7110f682522ce78db63a
- SHA1 765fcb9751d6f9f883a2e4c5ef389e6c0e01324f
- SHA512 2b849908ac27400cd66426e46c24c9f141bbb34e865a89c1a52fe6b3460486ba0ed7f7657f28271bcd0d9361e8cc591f696b5d0d1dc2b036a4165d6c7facb5d2
- SSDEEP 1572864:F2um44HifFo2jNzg1nNHG3cv4JW4/KMYAMvJmiftzjPzcsZM2AWUQriXy9:FTm4vda9NYJo+sUifljLcs22/r
- TLSH T1B218339A6D11B13EF453E473F01822E56249A4489B338BA7213BD4DDFCF26116B485FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4828 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4828 7zFM.exe Token: 35 4828 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4828 7zFM.exe