Analysis
- max time kernel
298s - max time network
23s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/08/2026, 07:33
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
sample.7z
Resource
win10v2004-20260513-en
6 signatures
300 seconds
Behavioral task
behavioral2
Sample
sample.7z
Resource
win11ltsc2024-20260709-en
4 signatures
300 seconds
General
- Target sample.7z
- Size 1.7MB
- Sample260820-jdwgcsvwct
- SHA256 27b2e13bfcb8de5078f1f8c0af861e513161c0e17812a9776911073d79742924
- MD5 e5a6df9fd02274a9ac50de6d44484cda
- SHA1 0019d4775ccbbdc2fff708278caecce4741e2aa9
- SHA512 3aa2a4045536b94d6ee11f0343cea2f9163a7a072abf6a8efed2d77cf937080c8ca29274e59036788962268a8738571497ae6ca640b21ec1e25c2decb6995dd5
- SSDEEP 49152:YTea2NHBN29bTudcUGX+9OlCWzlNbmVe4X9JMrzDAFV3LiY2TmIe:wG2ZTuDkSoHsoDQiDTmr
- TLSH T10D8533F4C04351BB21A20EE87EF9768AC9D6710EE4A8D5A287538F1D1BE7492DC7C21D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2124 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2124 7zFM.exe Token: 35 2124 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2124 7zFM.exe