Overview
overview
7Static
static
3LoveLive2D...x64.7z
windows10-2004-x64
1LoveLive2D...x64.7z
windows11-ltsc_2024-x64
1LoveLive2D.GUI.exe
windows10-2004-x64
7LoveLive2D.GUI.exe
windows11-ltsc_2024-x64
7LoveLive2D.GUI.pdb
windows10-2004-x64
3LoveLive2D.GUI.pdb
windows11-ltsc_2024-x64
3LoveLive2D.pdb
windows10-2004-x64
3LoveLive2D.pdb
windows11-ltsc_2024-x64
3patches/Renderer.dll
windows10-2004-x64
1patches/Renderer.dll
windows11-ltsc_2024-x64
1patches/rlm1501.jar
windows10-2004-x64
1patches/rlm1501.jar
windows11-ltsc_2024-x64
1patches/rlm1603.jar
windows10-2004-x64
1patches/rlm1603.jar
windows11-ltsc_2024-x64
1version.txt
windows10-2004-x64
1version.txt
windows11-ltsc_2024-x64
1Analysis
- max time kernel
298s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
13/08/2026, 05:07
Static task
static1
Behavioral task
behavioral1
Sample
LoveLive2D-v1.1.5-net8.0-win-x64.7z
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
LoveLive2D-v1.1.5-net8.0-win-x64.7z
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
LoveLive2D.GUI.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
LoveLive2D.GUI.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
LoveLive2D.GUI.pdb
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
LoveLive2D.GUI.pdb
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
LoveLive2D.pdb
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
LoveLive2D.pdb
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
patches/Renderer.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
patches/Renderer.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
patches/rlm1501.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
patches/rlm1501.jar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
patches/rlm1603.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
patches/rlm1603.jar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
version.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
version.txt
Resource
win11ltsc2024-20260709-en
General
- Target LoveLive2D-v1.1.5-net8.0-win-x64.7z
- Size 16.3MB
- Sample260813-fsdcjsbn7z
- SHA256 c5b63a8d51576c93c166b91e74cf3ffd9cf63df985f103fc4e283a3805f18e16
- MD5 0a803294cbef6e43bb4f3cc1086db221
- SHA1 31d5ad0c76638fd2ef817653d25f4297d97acc87
- SHA512 d7c8784c2c0aca9fb793949dab82d42dd43668d67284ee0b922aa295342c69e13b68e4f3ed9a2195e780029bbd2cfa6b061e000012e9cfcfe4d7106650f659d4
- SSDEEP 393216:RHtSqUj/sIFJ3zQZz73+HYJLBJgP2nbO7d7Sec5Jfkdyyv:e/Wzr5FJeX7FBc51kBv
- TLSH T1F30733728E0590CE077E72A31AEA517078238E864FEDB9159BFDCC13657803EE6458F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1240 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1240 7zFM.exe Token: 35 1240 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1240 7zFM.exe
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\LoveLive2D-v1.1.5-net8.0-win-x64.7z"1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:1240