Overview
overview
1Static
static
1New folder.rar
windows10-2004-x64
1New folder.rar
windows11-ltsc_2024-x64
1New folder...py.txt
windows10-2004-x64
1New folder...py.txt
windows11-ltsc_2024-x64
1New folder...py.txt
windows10-2004-x64
1New folder...py.txt
windows11-ltsc_2024-x64
1New folder...0).txt
windows10-2004-x64
1New folder...0).txt
windows11-ltsc_2024-x64
1New folder...py.txt
windows10-2004-x64
1New folder...py.txt
windows11-ltsc_2024-x64
1New folder...py.txt
windows10-2004-x64
1New folder...py.txt
windows11-ltsc_2024-x64
1New folder...py.txt
windows10-2004-x64
1New folder...py.txt
windows11-ltsc_2024-x64
1New folder...py.txt
windows10-2004-x64
1New folder...py.txt
windows11-ltsc_2024-x64
1New folder...py.txt
windows10-2004-x64
1New folder...py.txt
windows11-ltsc_2024-x64
1New folder...py.txt
windows10-2004-x64
1New folder...py.txt
windows11-ltsc_2024-x64
1New folder...py.txt
windows10-2004-x64
1New folder...py.txt
windows11-ltsc_2024-x64
1New folder...py.txt
windows10-2004-x64
1New folder...py.txt
windows11-ltsc_2024-x64
1New folder...py.txt
windows10-2004-x64
1New folder...py.txt
windows11-ltsc_2024-x64
1New folder...py.txt
windows10-2004-x64
1New folder...py.txt
windows11-ltsc_2024-x64
1New folder...py.txt
windows10-2004-x64
1New folder...py.txt
windows11-ltsc_2024-x64
1New folder...py.txt
windows10-2004-x64
1New folder...py.txt
windows11-ltsc_2024-x64
1Analysis
- max time kernel
148s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/08/2026, 11:31
Static task
static1
Behavioral task
behavioral1
Sample
New folder.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
New folder.rar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
New folder/death - Copy (10) - Copy - Copy.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
New folder/death - Copy (10) - Copy - Copy.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
New folder/death - Copy (10) - Copy.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
New folder/death - Copy (10) - Copy.txt
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral7
Sample
New folder/death - Copy (10).txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
New folder/death - Copy (10).txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
New folder/death - Copy (100) - Copy - Copy.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
New folder/death - Copy (100) - Copy - Copy.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
New folder/death - Copy (100) - Copy.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
New folder/death - Copy (100) - Copy.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
New folder/death - Copy (101) - Copy - Copy.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
New folder/death - Copy (101) - Copy - Copy.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
New folder/death - Copy (101) - Copy.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
New folder/death - Copy (101) - Copy.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
New folder/death - Copy (102) - Copy - Copy.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
New folder/death - Copy (102) - Copy - Copy.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
New folder/death - Copy (102) - Copy.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
New folder/death - Copy (102) - Copy.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
New folder/death - Copy (103) - Copy - Copy.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
New folder/death - Copy (103) - Copy - Copy.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
New folder/death - Copy (103) - Copy.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
New folder/death - Copy (103) - Copy.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
New folder/death - Copy (104) - Copy - Copy.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
New folder/death - Copy (104) - Copy - Copy.txt
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral27
Sample
New folder/death - Copy (104) - Copy.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
New folder/death - Copy (104) - Copy.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
New folder/death - Copy (105) - Copy - Copy.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
New folder/death - Copy (105) - Copy - Copy.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
New folder/death - Copy (105) - Copy.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
New folder/death - Copy (105) - Copy.txt
Resource
win11ltsc2024-20260709-en
General
- Target New folder.rar
- Size 114KB
- Sample260820-nm4ljsbl2t
- SHA256 09ed5d85f91a62dfd8a288f8d953cc305d110c2cc17be307ef6965084882c302
- MD5 0018a07c5e5d1d6ff40fc332ec595c1a
- SHA1 47263d20ecd60fc5a18cbfb7498c73b39c0ebb68
- SHA512 bba35b4ef516a424449e6c5fa48f7265323f2969d0b898c2e3bf69869046f97b67746cdf747a6876e64a2d2e37c0746be2205816bf4b8cb27a0979db97ffefd1
- SSDEEP 384:Cl0lVl0lVl0lkl0lNl0lBl0lEl0lVl0lAl0lkl0lxl0lRl0lNl0lcl0lwl0lIVlC:7HVx384ayV/6fQ
- TLSH T1A3B3C8DC6393B10E486A5E2867D88BF4B7BC2C4F866C19CB6F827A83363D4D744D1A15
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2380 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2380 7zFM.exe Token: 35 2380 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2380 7zFM.exe