Analysis
- max time kernel
148s - max time network
134s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/08/2026, 14:22
Static task
static1
Behavioral task
behavioral1
Sample
MussoliniGrabber.rar
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
MussoliniGrabber.rar
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target MussoliniGrabber.rar
- Size 3.8MB
- Sample260809-rprxbasxav
- SHA256 0ccfeb4caed31f48dfe790eb38327808c241cd3fd5e2abab4cae156ee7e88ae5
- MD5 53d6f2e9f7e28d3083020310074993d1
- SHA1 e7f6cf136c87f7f6854ac47ed543483bd97c719c
- SHA512 b8debb5ff421fe3369085da14a1b8387d7e7522e1e978852b121cdd9598aea7463f8b67755c342f92d7cc4da956c866a53b596806e4716b0410c2aa12d778c60
- SSDEEP 98304:x7GeSxY8vjWpoEtAv+sClktjDKhz/H7rApPDFvizcsS9n:xa9xRqKp9YVhzP4LhiwD
- TLSH T1F906332CB41DE5AEC9D1D2EA8DDCBDBC7A5298BEDAB444334D01B668FB740C468DD081
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2440 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2440 7zFM.exe Token: 35 2440 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2440 7zFM.exe