7fd1cbb0ec656ed8cc87e6e66826bbbc4d571e449955533e70c5ec6bbd3abd93

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/08/2026, 15:06

Sharing

Target
Lofy Cloner & Casa Cloner (1).rar
Size 8.1MB
Sample260828-sgtxdabl2x
SHA256 7fd1cbb0ec656ed8cc87e6e66826bbbc4d571e449955533e70c5ec6bbd3abd93
MD5 d0e8e147bb28b0038df18d061449bf5c
SHA1 e72fb97aeed1b8d20a4c50e79a28bba3a65cc186
SHA512 7f37bc9876510915fd46c1b7f2e6e9d1a2032f75864c623942558bb2d2ba9ab22eabca0fa272926424a2506f1df352c21687d04316535bef2f9f06481e869016
SSDEEP 196608://p1bB1CfrKsYTs9tMVFXyYqmFbeZAmeb2B6pCmwA8://+epTs9tMSYqCbeZA3yBswj
TLSH
T1C58633B992BBAC080EA7227AC59D3BF84417F373CCD6923754182FB529553C1A98523F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4172	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	4172	7zFM.exe
Token: 35	4172	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4172	7zFM.exe