Overview
overview
8Static
static
3alzaabitwe...ED.rar
windows10-2004-x64
1alzaabitwe...ED.rar
windows11-ltsc_2024-x64
1loader.exe
windows10-2004-x64
3loader.exe
windows11-ltsc_2024-x64
3patch/readme.md
windows10-2004-x64
3patch/readme.md
windows11-ltsc_2024-x64
3patch/remove.bat
windows10-2004-x64
8patch/remove.bat
windows11-ltsc_2024-x64
8patch/run.bat
windows10-2004-x64
8patch/run.bat
windows11-ltsc_2024-x64
8patch/server.js
windows10-2004-x64
3patch/server.js
windows11-ltsc_2024-x64
3حل مش�...خ.bat
windows10-2004-x64
8حل مش�...خ.bat
windows11-ltsc_2024-x64
8حل مش�...ث.bat
windows10-2004-x64
7حل مش�...ث.bat
windows11-ltsc_2024-x64
4حل مش�...ز.bat
windows10-2004-x64
6حل مش�...ز.bat
windows11-ltsc_2024-x64
6حل مش�...ت.bat
windows10-2004-x64
6حل مش�...ت.bat
windows11-ltsc_2024-x64
6حل مش�...ب.bat
windows10-2004-x64
8حل مش�...ب.bat
windows11-ltsc_2024-x64
8حل مش�...RU.bat
windows10-2004-x64
6حل مش�...RU.bat
windows11-ltsc_2024-x64
6Analysis
- user interaction
yes - max time kernel
298s - max time network
278s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
24/08/2026, 12:54
Static task
static1
Behavioral task
behavioral1
Sample
alzaabitweaksPATCHED.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
alzaabitweaksPATCHED.rar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
loader.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
loader.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
patch/readme.md
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
patch/readme.md
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
patch/remove.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
patch/remove.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
patch/run.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
patch/run.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
patch/server.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
patch/server.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
حل مشاكل/النسخ.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
حل مشاكل/النسخ.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
حل مشاكل/بلوتوث.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
حل مشاكل/بلوتوث.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
حل مشاكل/حل مشكله ابيك قيمز.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
حل مشاكل/حل مشكله ابيك قيمز.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
حل مشاكل/حل مشكله الواي فاي والنت.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
حل مشاكل/حل مشكله الواي فاي والنت.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
حل مشاكل/حل مشكله سطح مكتب.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
حل مشاكل/حل مشكله سطح مكتب.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
حل مشاكل/حل مشكله شاشه CRU.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
حل مشاكل/حل مشكله شاشه CRU.bat
Resource
win11ltsc2024-20260709-en
General
- Target alzaabitweaksPATCHED.rar
- Size 10.8MB
- Sample260824-p5dnhsde33
- SHA256 dc782f9b27a89270308d5a1c7b80cc9e5f22cd2893370fa6c01ebba5ab0e66cf
- MD5 d9a3e72f4c0379f2ab2cc82e632d0b31
- SHA1 d64ce5b90c5b28eb4ba4c56942f71fcf911b6e5d
- SHA512 ff63c235e61d5eba0f72889275d098b3fdc2926eb3103558c2ee5605164fa54962842609746088a94ad4abb2f246f33fc6d3c12531ff9804dc0303a9cf6eb58e
- SSDEEP 196608:ByTO/mnN35rpRN2CRnN1YIJGjSCpfZbQMqBcRX9mHI/Edx5erKMvZ2xqf4pvf/Z3:BPYNJdr2CRnNOIX0ZoBDI/kXMvZn+vfJ
- TLSH T1CDB6331969FB962ED0BABC58C4B34A30FF4352971A71E5344D40003BEA66F4721FAE9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4788 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4788 7zFM.exe Token: 35 4788 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4788 7zFM.exe