Analysis
- max time kernel
298s - max time network
145s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/09/2026, 20:35
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Release.rar
Resource
win10v2004-20260911-en
7 signatures
300 seconds
Behavioral task
behavioral2
Sample
Release.rar
Resource
win11ltsc2024-20260911-en
4 signatures
300 seconds
General
- Target Release.rar
- Size 1.5MB
- Sample260923-zddvbacd37
- SHA256 30fad7cd42b4365bedb5c6c246571148c87bc6224bc2fcb708ad7b946099713f
- MD5 9f4170f305e36e1a4be795b3717d4af1
- SHA1 fe7b801ac0b8edc45beabc26178d130f3bcfa429
- SHA512 7b59cc98449be9d3fdd396be7e6d08ee6a93a9364c94a38211beb5d6d6dc320302f20ba1e20adbda15e438e980834fdd933bd2b4433a07143fb9210ea8bcf6fa
- SSDEEP 49152:vJMxmdoviGqjYDrR/BcxqFzvU5ubTfdeKlu:ROvvinjY7D3djA
- TLSH T1F275337A1E2F96F24B966321B2708B33D510A6D8B82B4F9E5DA541DBC3AF0D5C0D7213
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2248 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2248 7zFM.exe Token: 35 2248 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2248 7zFM.exe