Overview
overview
5Static
static
1sample.tar
windows10-2004-x64
1sample.tar
windows11-ltsc_2024-x64
1bin/micromamba
ubuntu-18.04-amd64
1info/recipe/bld.bat
windows10-2004-x64
3info/recipe/bld.bat
windows11-ltsc_2024-x64
3info/recipe/build.sh
windows10-2004-x64
3info/recipe/build.sh
windows11-ltsc_2024-x64
3info/recip...ml.vbs
windows10-2004-x64
5info/recip...ml.vbs
windows11-ltsc_2024-x64
5info/test/run_test.sh
windows10-2004-x64
3info/test/run_test.sh
windows11-ltsc_2024-x64
3Analysis
- max time kernel
150s - max time network
151s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
07/09/2026, 12:26
Static task
static1
Behavioral task
behavioral1
Sample
sample.tar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
sample.tar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
bin/micromamba
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral4
Sample
info/recipe/bld.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
info/recipe/bld.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral6
Sample
info/recipe/build.sh
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
info/recipe/build.sh
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral8
Sample
info/recipe/meta.yaml.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
info/recipe/meta.yaml.vbs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral10
Sample
info/test/run_test.sh
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
info/test/run_test.sh
Resource
win11ltsc2024-20260709-en
General
- Target sample.tar
- Size 17.8MB
- Sample260907-pmccqshr71
- SHA256 0a1e8325bb0d6f9a97b0cb7f2125644ff6ee65e06072d087e8ee8adbe8e3dadd
- MD5 a779d591fbdbaca6fb9b2ac94dd88963
- SHA1 7363dc65fa262f2ab1c7d34b939c2356743af898
- SHA512 dcf31b6d6e81f4444ba58bfb4384c9153942f1bfc242be88421b3106378f5f35d16ba6792d4d91eee0d1610a57dec133f97ef647090834263e37648503339e5e
- SSDEEP 196608:6inQXK+7WStEAGmjBsWvdV4MZrhNaouQdx:6inQ0StZBsQZrhNaoj
- TLSH T1DD176D57E5E214ACC0A5C574835BD6B3BF3078A941213B7B6A88DA303F66F20572DFA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5624 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 5624 7zFM.exe Token: 35 5624 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5624 7zFM.exe