Overview
overview
7Static
static
3th06nc.7z
windows10-2004-x64
1th06nc.7z
windows11-ltsc_2024-x64
7th06nc/dat...1.opus
windows10-2004-x64
7th06nc/dat...1.opus
windows11-ltsc_2024-x64
1th06nc/dat...2.opus
windows10-2004-x64
7th06nc/dat...2.opus
windows11-ltsc_2024-x64
1th06nc/dat...3.opus
windows10-2004-x64
7th06nc/dat...3.opus
windows11-ltsc_2024-x64
1th06nc/dat...4.opus
windows10-2004-x64
7th06nc/dat...4.opus
windows11-ltsc_2024-x64
1th06nc/dat...5.opus
windows10-2004-x64
7th06nc/dat...5.opus
windows11-ltsc_2024-x64
1th06nc/dat...6.opus
windows10-2004-x64
7th06nc/dat...6.opus
windows11-ltsc_2024-x64
1th06nc/dat...7.opus
windows10-2004-x64
7th06nc/dat...7.opus
windows11-ltsc_2024-x64
1th06nc/dat...8.opus
windows10-2004-x64
7th06nc/dat...8.opus
windows11-ltsc_2024-x64
1th06nc/dat...9.opus
windows10-2004-x64
7th06nc/dat...9.opus
windows11-ltsc_2024-x64
1th06nc/dat...0.opus
windows10-2004-x64
7th06nc/dat...0.opus
windows11-ltsc_2024-x64
1th06nc/dat...1.opus
windows10-2004-x64
7th06nc/dat...1.opus
windows11-ltsc_2024-x64
1th06nc/dat...2.opus
windows10-2004-x64
7th06nc/dat...2.opus
windows11-ltsc_2024-x64
1th06nc/dat...3.opus
windows10-2004-x64
7th06nc/dat...3.opus
windows11-ltsc_2024-x64
1th06nc/dat...4.opus
windows10-2004-x64
7th06nc/dat...4.opus
windows11-ltsc_2024-x64
1th06nc/dat...5.opus
windows10-2004-x64
7th06nc/dat...5.opus
windows11-ltsc_2024-x64
1Analysis
- user interaction
yes - max time kernel
149s - max time network
201s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
10/09/2026, 21:09
Static task
static1
Behavioral task
behavioral1
Sample
th06nc.7z
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
th06nc.7z
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
th06nc/data/bgm/th06_01.opus
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
th06nc/data/bgm/th06_01.opus
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
th06nc/data/bgm/th06_02.opus
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
th06nc/data/bgm/th06_02.opus
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
th06nc/data/bgm/th06_03.opus
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
th06nc/data/bgm/th06_03.opus
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
th06nc/data/bgm/th06_04.opus
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
th06nc/data/bgm/th06_04.opus
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
th06nc/data/bgm/th06_05.opus
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
th06nc/data/bgm/th06_05.opus
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
th06nc/data/bgm/th06_06.opus
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
th06nc/data/bgm/th06_06.opus
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
th06nc/data/bgm/th06_07.opus
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
th06nc/data/bgm/th06_07.opus
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
th06nc/data/bgm/th06_08.opus
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
th06nc/data/bgm/th06_08.opus
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
th06nc/data/bgm/th06_09.opus
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
th06nc/data/bgm/th06_09.opus
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
th06nc/data/bgm/th06_10.opus
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
th06nc/data/bgm/th06_10.opus
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
th06nc/data/bgm/th06_11.opus
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
th06nc/data/bgm/th06_11.opus
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
th06nc/data/bgm/th06_12.opus
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
th06nc/data/bgm/th06_12.opus
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
th06nc/data/bgm/th06_13.opus
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
th06nc/data/bgm/th06_13.opus
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral29
Sample
th06nc/data/bgm/th06_14.opus
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
th06nc/data/bgm/th06_14.opus
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral31
Sample
th06nc/data/bgm/th06_15.opus
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
th06nc/data/bgm/th06_15.opus
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
General
- Target th06nc.7z
- Size 892.3MB
- Sample260910-zzghbsweld
- SHA256 0e167a4e858f264b1b2de9994fa395fd08d4545cc8290b837486ef5cd8b51385
- MD5 2f63295295a4f24cefa5f4eab1d9c6e5
- SHA1 5d622f25e695a81d3ff6955cad851d6e51a947f0
- SHA512 72c792bffd52f104dfd93ea55b2435ea1994309327e54eddeb2de8fe98f80f9959093a4a7e2a238424e13ee727379942fa4e3b3642404b4ee59f05f7be7e4bfd
- SSDEEP 25165824:aaIBzgnsw0BX5GRHzo99IzzlKs5BWLkDIJ+o0E5:sgsQzwIzzln5hA+o0u
- TLSH T169A933613F1EB1205C578837A1AC9C8AEB0909D95D63E26DD5394A82F323FE58F2474F
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1864 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1864 7zFM.exe Token: 35 1864 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1864 7zFM.exe