Overview
overview
7Static
static
3RenderRepa...z8.exe
windows10-2004-x64
4RenderRepa...z8.exe
windows11-ltsc_2024-x64
4$LOCALAPPD...on.ttf
windows10-2004-x64
7$LOCALAPPD...on.ttf
windows11-ltsc_2024-x64
3$PLUGINSDIR/7z.exe
windows10-2004-x64
3$PLUGINSDIR/7z.exe
windows11-ltsc_2024-x64
3$PLUGINSDIR/Python.7z
windows10-2004-x64
1$PLUGINSDIR/Python.7z
windows11-ltsc_2024-x64
1$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows11-ltsc_2024-x64
3register_task.py
windows10-2004-x64
3register_task.py
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
10/09/2026, 07:37
Static task
static1
Behavioral task
behavioral1
Sample
RenderRepairCpt_tl4xz8.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
RenderRepairCpt_tl4xz8.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$LOCALAPPDATA/Microsoft/Windows/Fonts/Sparkle Passion.ttf
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$LOCALAPPDATA/Microsoft/Windows/Fonts/Sparkle Passion.ttf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/7z.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/7z.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/Python.7z
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/Python.7z
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral13
Sample
register_task.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
register_task.py
Resource
win11ltsc2024-20260710-en
General
- Target $PLUGINSDIR/Python.7z
- Size 14.1MB
- Sample260910-jfr7qazemd
- SHA256 fe0a7177c705be7868be1c1ca603bab2a49558ec5e081ea1cffefa1674cd6f6e
- MD5 affd62743db4e282fbb5ae9baf31d356
- SHA1 36f96aadeb054160daab81dedadbca11b9a059b9
- SHA512 6b4fce954bfaf3ae028083d2e4a8c077368a3b390b7ae6380ceda5709817076e1147091b9b114344a7a8ffa21bda3eb2df1a6698ebe68486ce2ea3064c2f1251
- SSDEEP 393216:5tUu6KYPNfHqpH3HgnQDy1N3Vb7O/mQNPwlA:5tx65fmAnLNFaNoA
- TLSH T193E633A0542E3B543BEFD48AA85251D68E733AB820D27B40FFC56BB5895779C932C370
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1700 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1700 7zFM.exe Token: 35 1700 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1700 7zFM.exe