Analysis
- max time kernel
150s - max time network
135s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
15/08/2026, 04:32
Static task
static1
Behavioral task
behavioral1
Sample
MemeSense.rar
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
MemeSense.rar
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target MemeSense.rar
- Size 28.3MB
- Sample260815-e5ynksdh38
- SHA256 dc40d1c9d95d9e1c251ee82426572263a346ec3a5c70d19b7c39e1abe8e0284c
- MD5 94b1461547234a3dba9b21ec95df2cd5
- SHA1 59b0c027ebddf222b7df246b55355e87fc86b4ef
- SHA512 d9f46c3af3e16a3b38fe22915fee4abf96e39bb028bf9e44e35c34aed70d36b68eae7adb2dce4d8a73acaf622378dd6e2ef72c63bde7b081213e50b52093838b
- SSDEEP 786432:/3OMK9VNitqAQClJXyV3s9WYbVLTzcZZJ4AhfR:/3OMcQ1uIWYbVLTzcZZJ4eR
- TLSH T1A457331369C877D2329533650F35B5CC6ED392A25DF83CA73FC3522B8A91AA1CF91246
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3632 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3632 7zFM.exe Token: 35 3632 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3632 7zFM.exe