Overview
overview
6Static
static
3FarFarWest...ic.rar
windows10-2004-x64
1FarFarWest...ic.rar
windows11-ltsc_2024-x64
1FarFarWest...ix.ini
windows10-2004-x64
1FarFarWest...ix.ini
windows11-ltsc_2024-x64
1FarFarWest...ix.url
windows10-2004-x64
6FarFarWest...ix.url
windows11-ltsc_2024-x64
6FarFarWest...64.dll
windows10-2004-x64
1FarFarWest...64.dll
windows11-ltsc_2024-x64
1FarFarWest...st.txt
windows10-2004-x64
1FarFarWest...st.txt
windows11-ltsc_2024-x64
1FarFarWest...mm.dll
windows10-2004-x64
1FarFarWest...mm.dll
windows11-ltsc_2024-x64
1FarFarWest...64.dll
windows10-2004-x64
1FarFarWest...64.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
28/08/2026, 20:12
Static task
static1
Behavioral task
behavioral1
Sample
FarFarWest_Fix_Repair_Steam_Generic.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
FarFarWest_Fix_Repair_Steam_Generic.rar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
FarFarWest/Binaries/Win64/OnlineFix.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
FarFarWest/Binaries/Win64/OnlineFix.ini
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
FarFarWest/Binaries/Win64/OnlineFix.url
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
FarFarWest/Binaries/Win64/OnlineFix.url
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
FarFarWest/Binaries/Win64/OnlineFix64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
FarFarWest/Binaries/Win64/OnlineFix64.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
FarFarWest/Binaries/Win64/dlllist.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
FarFarWest/Binaries/Win64/dlllist.txt
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral11
Sample
FarFarWest/Binaries/Win64/winmm.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
FarFarWest/Binaries/Win64/winmm.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
FarFarWest/Plugins/SteamCore/Source/ThirdParty/SteamLibrary/redistributable_bin/win64/steam_api64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
FarFarWest/Plugins/SteamCore/Source/ThirdParty/SteamLibrary/redistributable_bin/win64/steam_api64.dll
Resource
win11ltsc2024-20260709-en
General
- Target FarFarWest_Fix_Repair_Steam_Generic.rar
- Size 11.0MB
- Sample260828-yyzf3sshjh
- SHA256 337f176e0cd73fdad1bbe73b1728cabf142659bb91f9346e1308577b83b0d76c
- MD5 0ed76c1784acb303c86318109fae062a
- SHA1 5ce202a7511d77b87288c0a32c01e7f6868cb2d8
- SHA512 d4d4e4274b76b60761e3c2c28436ae814c14033d86aeb53802343102bbe762a3252a047c9fd477394535f5089329328163188e81dc18617cb030a58ae01ee57e
- SSDEEP 196608:IyEc76Hk97SanTksq0BXb+6ygCM/4hKAL1ERmSToJxxyaDyR/tabv08N:tEUuinTdjXK68FhKAL1BSToJxjDK/Ov/
- TLSH T110C6336C972FD2FACEF63EEB403276D38DEBF5967898531500278A998046F3504E56C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 5020 7zFM.exe Token: 35 5020 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5020 7zFM.exe