c1613f6730af523c95cb2764555b59279bd3e4de7c693f7248dd5f32355ad60c

Analysis

max time kernel
148s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/08/2026, 07:37

Target
file by neizvestni.rar
Size 20.5MB
Sample260825-jf2fdst1ft
SHA256 c1613f6730af523c95cb2764555b59279bd3e4de7c693f7248dd5f32355ad60c
MD5 2ce09ed342f125199402fe45dad1c5e9
SHA1 efbae2aafddb842bcd256c14a1d0fa138a8eeeb3
SHA512 25d3fbb3ccd8d7ea60b3317c06da5db73f72092d089f2b59baecde9b2c8048065eaa8a537d8ea44301c2060eaf459c02cbf92434e033d91a5f84f6ec2239e44d
SSDEEP 393216:8UJ9tSxz2wEMrYdHJYDdi4pw88oMiyiSa663DlI05VKL:njcxz2fFdpYDdiHSMkSd6Ti05m
TLSH
T1732733224D14DC6A427D125DF2C6281DE27BCF6E960EA62163CC7FC26E12109CFD967B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4532	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	4532	7zFM.exe
Token: 35	4532	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4532	7zFM.exe