Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
25/08/2026, 07:13
Static task
static1
Behavioral task
behavioral1
Sample
Multi-Tree Farm.gz
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Multi-Tree Farm.gz
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
Multi-Tree Farm.litematic
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
Multi-Tree Farm.litematic
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target Multi-Tree Farm.gz
- Size 4KB
- Sample260825-h14wkstycv
- SHA256 fdb03b1b95832123dce61d9402e042796efadca248b8cf8e519e96144fa77b23
- MD5 85cc33fd0cbf76bcdf0f2b8e66159ee4
- SHA1 a4d7d503ddeedb11909add6b1e960e87b37f5f84
- SHA512 3296fa916368ccc5f7fdddae302900b3d00ee41c293c2e51a6ca81a848580984508ee003e3b25fe5691edb9e84ae24bb7ed93dbd9f858395f1f4080e2e418c98
- SSDEEP 96:8lFXFVL+6V7ffriIgOB69DcFvLGqRloxgLiCjlppWD1kt1+AGjAain:iXFrV7fDiYBaDc1LGilK2blpwkc1k
- TLSH T15AA17E1371F793885E88F7DEDC322D60EEB007326D79F936A03024281A7A5794CB4718
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3692 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3692 7zFM.exe Token: 35 3692 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3692 7zFM.exe