Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
14/08/2026, 23:55
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9hx.7z
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
9hx.7z
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
9hx/CREATIVE EAX NEW.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
9hx/CREATIVE EAX NEW.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
9hx/GRAND.png
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
9hx/GRAND.png
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
General
- Target 9hx.7z
- Size 690KB
- Sample260814-3ytcaathrf
- SHA256 ffab0b6ac5f7bfcd16e26073c4cdc73ddd5db11638572b8d8cdce01692803818
- MD5 3c3eec777e442eec73de96687767513f
- SHA1 0358ac50823bae95f4f9336b52cc7468198ab13c
- SHA512 f2b90c3fc7efc7f00ada4920388dc665b42cdda66d6de9a7558f736dcec36874f06596584cfc6e5bfa3768ac9f8cfa3d0bc7d6b58e78899e25abd692d3c26470
- SSDEEP 12288:LfB/b9vHHw3MWtY/x32Ac+ivY93igwTHIn2SYn6Z4VF5spew5PxAEQ8OXOw2:xb9vnRWO53zoQ9ZwEn2SYpV4H2IOOR
- TLSH T1ADE43368D763C66567BE10A55FFFA1EDD1C3753B96ED20CC50281A09C3C27C0EA6C2A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2400 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2400 7zFM.exe Token: 35 2400 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2400 7zFM.exe