Analysis
- max time kernel
68s - max time network
68s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
16/08/2026, 16:41
Static task
static1
Behavioral task
behavioral1
Sample
HG1945_v1.0.1 [Thomas Taihei].rar
Resource
win10v2004-20260513-en
7 signatures
900 seconds
Behavioral task
behavioral2
Sample
HG1945_v1.0.1 [Thomas Taihei].rar
Resource
win11ltsc2024-20260709-en
3 signatures
900 seconds
General
- Target HG1945_v1.0.1 [Thomas Taihei].rar
- Size 55.7MB
- Sample260816-t7dhrasbpb
- SHA256 71a855d912c6a688668686b04b43dcea99610837e056eec227b0a931246cb95e
- MD5 f3e8ffceac0a700b29d606a01f8451d3
- SHA1 5dc4102d888b3ebc6bb2e6a3f739fd6806e271d3
- SHA512 6e04239f47f4942bcf98625109ae6de4a6bc0847298406e5a1d65668cd03144e61e60d7829bad9909cfabf2bf98513e8ba4db84832dd6c2c51a0bf580612faad
- SSDEEP 1572864:OVzTtPmObDAT7DtkEuUPskJcnKlSowFnGbQ6z:OVzhPhfAT7ZKU0rKlSo9b1
- TLSH T1ECD733CCE3198AA4C8AF168C5548A24FDCE9D24883D3445534F9E9209B1B3B9DDFBB74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 5208 7zFM.exe Token: 35 5208 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5208 7zFM.exe