Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
19/08/2026, 06:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Strafe.one.rar
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Strafe.one.rar
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target Strafe.one.rar
- Size 16.3MB
- Sample260819-hbvxdayeld
- SHA256 7bd90f86f45831da59805b8bcfa14986d6a05986919090b82543f681ebfddd7c
- MD5 686bc71087972879a154eb15e917a4d5
- SHA1 bf25a4232985b627925c55a69c829432335cc9d5
- SHA512 3a5c29041887f43e2b17e2ebba3db85001cedd52ffa36b5792413030d6409d6db71b79eda1e7387b8417ac7ff38d83615639c98419d1c1073856c3d69fed9e37
- SSDEEP 393216:OgWHYzoqlgNYczJ6dF0h0uzC10v4A9mfR28NX+60jFpl:Ljlgbjt3SRdOF3
- TLSH T1BC07339BFDBFF862DB6A027210F794576811DEE6CA0CF60821DA061656B07F5231ACC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4908 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4908 7zFM.exe Token: 35 4908 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4908 7zFM.exe