Analysis
- geolocation tags
asiadelhiinindia - max time kernel
148s - max time network
141s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/09/2026, 17:37
Static task
static1
Behavioral task
behavioral1
Sample
AL8'R RAT (1).rar
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
AL8'R RAT (1).rar
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target AL8'R RAT (1).rar
- Size 20.3MB
- Sample260903-v7fhsasdph
- SHA256 ea3fe74a7e5589b2b37e95375659f957d14ade96785896090093f289d62fd6cb
- MD5 6fecf4cf5cea886f872f58cce1b24b9a
- SHA1 c9cf8cbf4ea2a520046b78014804f3e245bc4cec
- SHA512 d93f1b11dd0847d686c1a179d4b58e47023b62fe2cae7ef7b0ce60ee5553e2f8004aba7472aee5244b3fe2e0af11a670622752f1155b2db97551ed928dc0dba7
- SSDEEP 393216:iRprabRtUDgDEmlgv6st/mw6sBiEPWFtyAiI7PDttMF2vBGuwLY:8rabRtfFmSOx6lEUyvWPDoF2vsuwM
- TLSH T1D027339AFC9EF0A390C46777186D84854C029BC5B5874187CD4FA324CFE25BAC4FB66A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4180 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4180 7zFM.exe Token: 35 4180 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4180 7zFM.exe