Analysis
- user interaction
yes - max time kernel
148s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
19/09/2026, 19:54
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Riot Client.7z
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
Riot Client.7z
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
General
- Target Riot Client.7z
- Size 91.2MB
- Sample260919-ymr8maeq21
- SHA256 f570dda67955360e3afaff9f0cf61053b94b1ad07549b301020942ad90eb682d
- MD5 da5a61d9fd576752b7f30b8a77dbbd46
- SHA1 db45e26c673dd30143c9dec220e06a7682a5cc48
- SHA512 a6518362171b1ff4755cdfcf2a57cab8d30867a53029ac0ff83fb75291f75570e3fece75785b63efba1e91458bb3f937e0f523ca5e1fc88798b57c3f9f1d5152
- SSDEEP 1572864:crZJ9ZmRqksdDUujQV4wrDcLnsSJ3QDISFPETkQW96GGsh+PB5dQWe9r0BwKyi98:m/ZSqk6EvfgnsQ3bSF8TkQW96GIPzdQr
- TLSH T1312833101FF37623F95F7334DC2A04340CB96203B0117B9AAECE546BBDBA6689D5199B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4692 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4692 7zFM.exe Token: 35 4692 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4692 7zFM.exe