a57587b0d36061a56aff449976ba1776fcc9ec0acc7b34bd5a3394467350a22b

Analysis

max time kernel
150s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/08/2026, 03:53

Target
New WinRAR archive.rar
Size 5.5MB
Sample260822-ef5qlavwft
SHA256 a57587b0d36061a56aff449976ba1776fcc9ec0acc7b34bd5a3394467350a22b
MD5 8b06c41c7d54df8376153b7268efeaf8
SHA1 6c0c4f8cac0815487276e1441958ec008e928947
SHA512 f8bce86662dd0ba18675d114fa61e22fa8420145b1b0b783d6257783483c7cd6cfda006b6bf61efde08bce110f1570f5d018f370703f58bdc5951855b9c428e5
SSDEEP 98304:JWa7Ztavc2GNcBu9qRRxLpqHeNFT3wRgSqvG0OXwq5QaEUYPRN6rkSHVuxFH8f:JWa7Zz2rLjqHeNFTwRgSq5OXwX5UQ/6D
TLSH
T10D46331388691EB33E02B21C735A3F917DF861C71C23C16D8DF1A6A5D87301996A9DAF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1060	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	1060	7zFM.exe
Token: 35	1060	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1060	7zFM.exe