Analysis
- user interaction
yes - max time kernel
154s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
29/09/2026, 23:28
Static task
static1
Behavioral task
behavioral1
Sample
071-2.rar
Resource
win11ltsc2024-20260911-en
4 signatures
900 seconds
General
- Target 071-2.rar
- Size 266.1MB
- Sample260929-3gccfazblc
- SHA256 3d3f27eabcdb73c6612f9f6e5896528377a38997a5975665d0417eca1cdf7c5c
- MD5 78836f0343c87bb97bd49444f4a8c92e
- SHA1 780862e73b8af9ecfe29b03c6f88e1c421fb84fb
- SHA512 8f7ea6e6bfd404163102937a7f37be4154019219c3e5b49f6fc6a63b5cc07dbab6a1c745dd6e69e182adeca3dabcbeda6af6c7a1105615beb6e215be56a3f177
- SSDEEP 6291456:BDIixBKHtKB7dSXC1YfnSXjr/UTqOWZhmiTm4VAWy6:mixQHUAHSXn/Eqrz1iQy6
- TLSH T12ED833BC907874F1845FD4F0CE1169CC965172BA6EA34E2CBC39DDF036AAA2252354ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4524 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4524 7zFM.exe Token: 35 4524 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4524 7zFM.exe