Overview
overview
7Static
static
3Scritchy-S...om.rar
windows10-2004-x64
7Scritchy-S...om.rar
windows11-ltsc_2024-x64
1Scritchy S...ed.txt
windows10-2004-x64
1Scritchy S...ed.txt
windows11-ltsc_2024-x64
1Scritchy S...ET.txt
windows10-2004-x64
1Scritchy S...ET.txt
windows11-ltsc_2024-x64
1Scritchy S...ources
windows10-2004-x64
3Scritchy S...ources
windows11-ltsc_2024-x64
3Scritchy S..._extra
windows10-2004-x64
3Scritchy S..._extra
windows11-ltsc_2024-x64
Scritchy S...s.json
windows10-2004-x64
3Scritchy S...s.json
windows11-ltsc_2024-x64
3Scritchy S...s.json
windows10-2004-x64
3Scritchy S...s.json
windows11-ltsc_2024-x64
3Scritchy S...n.json
windows10-2004-x64
3Scritchy S...n.json
windows11-ltsc_2024-x64
3Scritchy S...nk.xml
windows10-2004-x64
3Scritchy S...nk.xml
windows11-ltsc_2024-x64
1Scritchy S...bundle
windows10-2004-x64
3Scritchy S...bundle
windows11-ltsc_2024-x64
3Scritchy S...bundle
windows10-2004-x64
3Scritchy S...bundle
windows11-ltsc_2024-x64
3Scritchy S...bundle
windows10-2004-x64
3Scritchy S...bundle
windows11-ltsc_2024-x64
3Scritchy S...bundle
windows10-2004-x64
3Scritchy S...bundle
windows11-ltsc_2024-x64
3Scritchy S...bundle
windows10-2004-x64
3Scritchy S...bundle
windows11-ltsc_2024-x64
3Scritchy S...bundle
windows10-2004-x64
3Scritchy S...bundle
windows11-ltsc_2024-x64
3Scritchy S...bundle
windows10-2004-x64
3Scritchy S...bundle
windows11-ltsc_2024-x64
3Analysis
- user interaction
yes - max time kernel
598s - max time network
468s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-es - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-eslocale:es-esos:windows11-ltsc_2024-x64systemwindows - submitted
10/09/2026, 14:06
Static task
static1
Behavioral task
behavioral1
Sample
Scritchy-Scratchy-SteamRIP.com.rar
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral2
Sample
Scritchy-Scratchy-SteamRIP.com.rar
Resource
win11ltsc2024-20260709-es
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
Scritchy Scratchy/Scritchy Scratchy_BurstDebugInformation_DoNotShip/Data/Plugins/x86_64/lib_burst_generated.txt
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral4
Sample
Scritchy Scratchy/Scritchy Scratchy_BurstDebugInformation_DoNotShip/Data/Plugins/x86_64/lib_burst_generated.txt
Resource
win11ltsc2024-20260709-es
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
Scritchy Scratchy/ScritchyScratchy_Data/Plugins/Steamworks.NET.txt
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral6
Sample
Scritchy Scratchy/ScritchyScratchy_Data/Plugins/Steamworks.NET.txt
Resource
win11ltsc2024-20260709-es
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
Scritchy Scratchy/ScritchyScratchy_Data/Resources/unity default resources
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral8
Sample
Scritchy Scratchy/ScritchyScratchy_Data/Resources/unity default resources
Resource
win11ltsc2024-20260709-es
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
Scritchy Scratchy/ScritchyScratchy_Data/Resources/unity_builtin_extra
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral10
Sample
Scritchy Scratchy/ScritchyScratchy_Data/Resources/unity_builtin_extra
Resource
win11ltsc2024-20260709-es
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
Scritchy Scratchy/ScritchyScratchy_Data/RuntimeInitializeOnLoads.json
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral12
Sample
Scritchy Scratchy/ScritchyScratchy_Data/RuntimeInitializeOnLoads.json
Resource
win11ltsc2024-20260709-es
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
Scritchy Scratchy/ScritchyScratchy_Data/ScriptingAssemblies.json
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral14
Sample
Scritchy Scratchy/ScritchyScratchy_Data/ScriptingAssemblies.json
Resource
win11ltsc2024-20260709-es
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
Scritchy Scratchy/ScritchyScratchy_Data/StreamingAssets/UnityServicesProjectConfiguration.json
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral16
Sample
Scritchy Scratchy/ScritchyScratchy_Data/StreamingAssets/UnityServicesProjectConfiguration.json
Resource
win11ltsc2024-20260709-es
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
Scritchy Scratchy/ScritchyScratchy_Data/StreamingAssets/aa/AddressablesLink/link.xml
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral18
Sample
Scritchy Scratchy/ScritchyScratchy_Data/StreamingAssets/aa/AddressablesLink/link.xml
Resource
win11ltsc2024-20260709-es
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
Scritchy Scratchy/ScritchyScratchy_Data/StreamingAssets/aa/StandaloneWindows64/bb093789c87317d19f291.bundle
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral20
Sample
Scritchy Scratchy/ScritchyScratchy_Data/StreamingAssets/aa/StandaloneWindows64/bb093789c87317d19f291.bundle
Resource
win11ltsc2024-20260709-es
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
Scritchy Scratchy/ScritchyScratchy_Data/StreamingAssets/aa/StandaloneWindows64/localization-asset-ta.bundle
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral22
Sample
Scritchy Scratchy/ScritchyScratchy_Data/StreamingAssets/aa/StandaloneWindows64/localization-asset-ta.bundle
Resource
win11ltsc2024-20260709-es
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
Scritchy Scratchy/ScritchyScratchy_Data/StreamingAssets/aa/StandaloneWindows64/localization-asset-ta.bundle
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral24
Sample
Scritchy Scratchy/ScritchyScratchy_Data/StreamingAssets/aa/StandaloneWindows64/localization-asset-ta.bundle
Resource
win11ltsc2024-20260709-es
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
Scritchy Scratchy/ScritchyScratchy_Data/StreamingAssets/aa/StandaloneWindows64/localization-asset-ta.bundle
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral26
Sample
Scritchy Scratchy/ScritchyScratchy_Data/StreamingAssets/aa/StandaloneWindows64/localization-asset-ta.bundle
Resource
win11ltsc2024-20260709-es
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
Scritchy Scratchy/ScritchyScratchy_Data/StreamingAssets/aa/StandaloneWindows64/localization-asset-ta.bundle
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral28
Sample
Scritchy Scratchy/ScritchyScratchy_Data/StreamingAssets/aa/StandaloneWindows64/localization-asset-ta.bundle
Resource
win11ltsc2024-20260709-es
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
Scritchy Scratchy/ScritchyScratchy_Data/StreamingAssets/aa/StandaloneWindows64/localization-asset-ta.bundle
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral30
Sample
Scritchy Scratchy/ScritchyScratchy_Data/StreamingAssets/aa/StandaloneWindows64/localization-asset-ta.bundle
Resource
win11ltsc2024-20260709-es
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
Scritchy Scratchy/ScritchyScratchy_Data/StreamingAssets/aa/StandaloneWindows64/localization-asset-ta.bundle
Resource
win10v2004-20260513-es
windows10-2004-x64
Behavioral task
behavioral32
Sample
Scritchy Scratchy/ScritchyScratchy_Data/StreamingAssets/aa/StandaloneWindows64/localization-asset-ta.bundle
Resource
win11ltsc2024-20260709-es
windows11-ltsc_2024-x64
General
- Target Scritchy-Scratchy-SteamRIP.com.rar
- Size 211.0MB
- Sample260910-rew4aaysdv
- SHA256 fd358eacff1fb7abd4b3265d4226ccf994b1bac62fba6454d6f787b17f9b057c
- MD5 245c42b2dbba75f55929149b3915c241
- SHA1 087d08bc45202b0767aa63dd61600a6ad605f3c2
- SHA512 8a80ecf8fbf099cb01cf81090fd42254608815f6f593d97d6a93f74093ad2da6dce767605d85abe9c82f4769398c69bb62af2eda22eed8eed98b2788174ccb2b
- SSDEEP 6291456:9SUZaOvzp69ORyveRxvW0BvuIXpmIgCxBrSXgRJQ3sZ9V9LOhIw:9RD09ORqcx+0ZRXpmIgC/66QYLOj
- TLSH T13EB833F1CB81AE97D2D7413539254F6FF3E680E184E7026BD8131E053E76AA583BA943
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2592 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2592 7zFM.exe Token: 35 2592 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2592 7zFM.exe
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Scritchy-Scratchy-SteamRIP.com.rar"1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:2592
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:5904
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:252