d5a00b33f69504c87fa00f033704d2bec1da1204e3ee80a0fe461c237114c502

Login
Reports

Overview

overview

Static

static

hydralaunc...le.exe

windows10-2004-x64

hydralaunc...le.exe

windows11-ltsc_2024-x64

$PLUGINSDI...ls.dll

windows10-2004-x64

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

$PLUGINSDI...em.dll

windows10-2004-x64

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

$PLUGINSDIR/app-64.7z

windows10-2004-x64

$PLUGINSDIR/app-64.7z

windows11-ltsc_2024-x64

resources/...on.pyc

windows10-2004-x64

resources/...on.pyc

windows11-ltsc_2024-x64

resources/...er.pyc

windows10-2004-x64

resources/...er.pyc

windows11-ltsc_2024-x64

resources/...er.pyc

windows10-2004-x64

resources/...er.pyc

windows11-ltsc_2024-x64

resources/...ry.pyc

windows10-2004-x64

resources/...ry.pyc

windows11-ltsc_2024-x64

resources/...es.pyc

windows10-2004-x64

resources/...es.pyc

windows11-ltsc_2024-x64

resources/...wn.pyc

windows10-2004-x64

resources/...wn.pyc

windows11-ltsc_2024-x64

resources/...ze.pyc

windows10-2004-x64

resources/...ze.pyc

windows11-ltsc_2024-x64

resources/...il.pyc

windows10-2004-x64

resources/...il.pyc

windows11-ltsc_2024-x64

resources/...at.dll

windows10-2004-x64

resources/...at.dll

windows11-ltsc_2024-x64

resources/...ct.dll

windows10-2004-x64

resources/...ct.dll

windows11-ltsc_2024-x64

resources/...ta.dll

windows10-2004-x64

resources/...ta.dll

windows11-ltsc_2024-x64

resources/...__.pyc

windows10-2004-x64

resources/...__.pyc

windows11-ltsc_2024-x64

Analysis

max time kernel
148s
max time network
159s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/08/2026, 10:32

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

hydralauncher-4.1.1-portable.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

hydralauncher-4.1.1-portable.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

12 signatures

150 seconds

discovery execution spyware stealer

Behavioral task

behavioral3

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral4

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral5

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral6

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral7

Sample

$PLUGINSDIR/app-64.7z

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/app-64.7z

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

resources/hydra-python-rpc/lib/multiprocessing/reduction.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral10

Sample

resources/hydra-python-rpc/lib/multiprocessing/reduction.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral11

Sample

resources/hydra-python-rpc/lib/multiprocessing/resource_sharer.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

10 signatures

150 seconds

adware discovery execution spyware

Behavioral task

behavioral12

Sample

resources/hydra-python-rpc/lib/multiprocessing/resource_sharer.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral13

Sample

resources/hydra-python-rpc/lib/multiprocessing/resource_tracker.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral14

Sample

resources/hydra-python-rpc/lib/multiprocessing/resource_tracker.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral15

Sample

resources/hydra-python-rpc/lib/multiprocessing/shared_memory.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral16

Sample

resources/hydra-python-rpc/lib/multiprocessing/shared_memory.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral17

Sample

resources/hydra-python-rpc/lib/multiprocessing/sharedctypes.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral18

Sample

resources/hydra-python-rpc/lib/multiprocessing/sharedctypes.pyc

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral19

Sample

resources/hydra-python-rpc/lib/multiprocessing/spawn.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral20

Sample

resources/hydra-python-rpc/lib/multiprocessing/spawn.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral21

Sample

resources/hydra-python-rpc/lib/multiprocessing/synchronize.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral22

Sample

resources/hydra-python-rpc/lib/multiprocessing/synchronize.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral23

Sample

resources/hydra-python-rpc/lib/multiprocessing/util.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral24

Sample

resources/hydra-python-rpc/lib/multiprocessing/util.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral25

Sample

resources/hydra-python-rpc/lib/pyexpat.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

resources/hydra-python-rpc/lib/pyexpat.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

resources/hydra-python-rpc/lib/select.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

resources/hydra-python-rpc/lib/select.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

resources/hydra-python-rpc/lib/unicodedata.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

resources/hydra-python-rpc/lib/unicodedata.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

resources/hydra-python-rpc/lib/urllib/__init__.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution

Behavioral task

behavioral32

Sample

resources/hydra-python-rpc/lib/urllib/__init__.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution

Report Analysis Logs

General

Target
$PLUGINSDIR/app-64.7z
Size 176.2MB
Sample260814-mlbcyahb59
SHA256 d5a00b33f69504c87fa00f033704d2bec1da1204e3ee80a0fe461c237114c502
MD5 a72c11326d4e87569456f6312c550c3a
SHA1 c14db15c6a5faba3c6827ffc6da343023836bf45
SHA512 c371b472ecdae55f79d64ff43084e4d264a63630189b313b51c7979c2151395d40bf2a0b7341942f3c29e4d4039096ebfe3e5b33a8fd989dc4231cbc7043df2b
SSDEEP 3145728:T2YaHElcP0vm54QgHXcJUA68QpeLebG7g6bgdC+wpkQorEprWzo+:yYRHvma9AKY/EdCDSQorVo+
TLSH
T1FD9833AC63167B53DCD0A470606A0B902A4737DECCA08DA79B659CD40179DECD3FBA27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1972	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	1972	7zFM.exe
Token: 35	1972	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1972	7zFM.exe

Processes

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\app-64.7z"
1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:1972

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads