Overview
overview
3Static
static
1asw-cadill...pec.7z
windows10-2004-x64
1asw-cadill...pec.7z
windows11-ltsc_2024-x64
1nohesi_ct5...n.json
windows10-2004-x64
3nohesi_ct5...n.json
windows11-ltsc_2024-x64
3nohesi_ct5...AO.dds
windows10-2004-x64
3nohesi_ct5...AO.dds
windows11-ltsc_2024-x64
3nohesi_ct5...AO.dds
windows10-2004-x64
3nohesi_ct5...AO.dds
windows11-ltsc_2024-x64
3nohesi_ct5...AO.dds
windows10-2004-x64
3nohesi_ct5...AO.dds
windows11-ltsc_2024-x64
3nohesi_ct5...AO.dds
windows10-2004-x64
3nohesi_ct5...AO.dds
windows11-ltsc_2024-x64
3nohesi_ct5...AO.dds
windows10-2004-x64
3nohesi_ct5...AO.dds
windows11-ltsc_2024-x64
3nohesi_ct5...AO.dds
windows10-2004-x64
3nohesi_ct5...AO.dds
windows11-ltsc_2024-x64
3nohesi_ct5...ay.png
windows10-2004-x64
1nohesi_ct5...ay.png
windows11-ltsc_2024-x64
1nohesi_ct5...nd.png
windows10-2004-x64
1nohesi_ct5...nd.png
windows11-ltsc_2024-x64
1nohesi_ct5.../7.png
windows10-2004-x64
1nohesi_ct5.../7.png
windows11-ltsc_2024-x64
1nohesi_ct5.../8.png
windows10-2004-x64
1nohesi_ct5.../8.png
windows11-ltsc_2024-x64
1nohesi_ct5...f2.dds
windows10-2004-x64
3nohesi_ct5...f2.dds
windows11-ltsc_2024-x64
3nohesi_ct5...f3.dds
windows10-2004-x64
3nohesi_ct5...f3.dds
windows11-ltsc_2024-x64
3nohesi_ct5...f4.dds
windows10-2004-x64
3nohesi_ct5...f4.dds
windows11-ltsc_2024-x64
3nohesi_ct5...l3.dds
windows10-2004-x64
3nohesi_ct5...l3.dds
windows11-ltsc_2024-x64
3Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/09/2026, 22:34
Static task
static1
Behavioral task
behavioral1
Sample
asw-cadillac-ct5-v-blackwing-no-hesi-spec.7z
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
asw-cadillac-ct5-v-blackwing-no-hesi-spec.7z
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
nohesi_ct5v/skins/generated/ui_skin.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
nohesi_ct5v/skins/generated/ui_skin.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
nohesi_ct5v/texture/_details/black stripe - black roof/Skin_00_AO.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
nohesi_ct5v/texture/_details/black stripe - black roof/Skin_00_AO.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
nohesi_ct5v/texture/_details/black stripe - no roof/Skin_00_AO.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
nohesi_ct5v/texture/_details/black stripe - no roof/Skin_00_AO.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
nohesi_ct5v/texture/_details/blue stripe - no roof/Skin_00_AO.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
nohesi_ct5v/texture/_details/blue stripe - no roof/Skin_00_AO.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
nohesi_ct5v/texture/_details/no stripe - black roof/Skin_00_AO.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
nohesi_ct5v/texture/_details/no stripe - black roof/Skin_00_AO.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
nohesi_ct5v/texture/_details/no stripe - no roof/Skin_00_AO.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
nohesi_ct5v/texture/_details/no stripe - no roof/Skin_00_AO.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
nohesi_ct5v/texture/_details/white stripe - no roof/Skin_00_AO.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
nohesi_ct5v/texture/_details/white stripe - no roof/Skin_00_AO.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
nohesi_ct5v/texture/display.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
nohesi_ct5v/texture/display.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
nohesi_ct5v/texture/display_background.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
nohesi_ct5v/texture/display_background.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
nohesi_ct5v/texture/flames/7.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
nohesi_ct5v/texture/flames/7.png
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral23
Sample
nohesi_ct5v/texture/flames/8.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
nohesi_ct5v/texture/flames/8.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
nohesi_ct5v/texture/flames/f2.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
nohesi_ct5v/texture/flames/f2.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
nohesi_ct5v/texture/flames/f3.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
nohesi_ct5v/texture/flames/f3.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
nohesi_ct5v/texture/flames/f4.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
nohesi_ct5v/texture/flames/f4.dds
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
nohesi_ct5v/texture/flames/l3.dds
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
nohesi_ct5v/texture/flames/l3.dds
Resource
win11ltsc2024-20260709-en
General
- Target asw-cadillac-ct5-v-blackwing-no-hesi-spec.7z
- Size 69.2MB
- Sample260903-2g932agm21
- SHA256 79a628ddd90e46f27e8357b157185e68d4005ad02717963525a11d8d26441a4e
- MD5 7fce47e062df4c631c8e279d31a3d37a
- SHA1 8a699478252e9069165b33405cdb4ee887a1ef27
- SHA512 516a300157e9615f67fe79aa702a6b1de725a156b80ff139d37fdab49dc69abc545037f6b184ed6cb7045c7b1a1988cb57cfbddb1640caf10d8d0c081ba4acd8
- SSDEEP 1572864:7c70Oo1rW0ZCJ0cWe+2u61T8+++bM9Wavay+:o7no1LZC6cW5f+bMs
- TLSH T170F73327C598E98D1D83905DDB1C177C29621FACDF43EE96F950698022139B4B2BBFB0
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1456 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1456 7zFM.exe Token: 35 1456 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1456 7zFM.exe
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\asw-cadillac-ct5-v-blackwing-no-hesi-spec.7z"1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:1456