Overview
overview
5Static
static
5ryzen.rar
windows10-2004-x64
1ryzen.rar
windows11-ltsc_2024-x64
1ryzen/ryzen/args.txt
windows10-2004-x64
1ryzen/ryzen/args.txt
windows11-ltsc_2024-x64
1ryzen/ryze...nt.jar
windows10-2004-x64
1ryzen/ryze...nt.jar
windows11-ltsc_2024-x64
1ryzen/ryze...11.jar
windows10-2004-x64
1ryzen/ryze...11.jar
windows11-ltsc_2024-x64
1ryzen/ryze...ne.bat
windows10-2004-x64
3ryzen/ryze...ne.bat
windows11-ltsc_2024-x64
3Analysis
- max time kernel
148s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/09/2026, 12:36
Static task
static1
Behavioral task
behavioral1
Sample
ryzen.rar
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
ryzen.rar
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
ryzen/ryzen/args.txt
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
ryzen/ryzen/args.txt
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
ryzen/ryzen/mods/RyzenClient.jar
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
ryzen/ryzen/mods/RyzenClient.jar
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
ryzen/ryzen/mods/fabric-api-0.141.6+1.21.11.jar
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
ryzen/ryzen/mods/fabric-api-0.141.6+1.21.11.jar
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
ryzen/ryzen/start_offline.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
ryzen/ryzen/start_offline.bat
Resource
win11ltsc2024-20260911-en
General
- Target ryzen.rar
- Size 73.1MB
- Sample260930-ps26cavx9k
- SHA256 ffa5e175eaefffae7b4f82b057c37016527b4b4ea0045d0e830cf527e8538ddf
- MD5 90f9dcf191bf6e817af37b76568f77c9
- SHA1 6d54ffc76c602d82536286f2b9d82208a767fef7
- SHA512 99d12be26fdcc5314a269a322b6514ec96bd639523408b3b82ecc6cf7da63467457ca6ed6235e742c676309caf61e48251db0593f5c1a402c3f052feffa13d15
- SSDEEP 1572864:db8yxZCPtlwZbnW/bidP7K50bFxSaQQcW7ZLbWsqO+mwdLrywtjXV3v1vTQVNIn8:d4yxZCPtlwZIixKGbFxS/W79WRO+mWLO
- TLSH T1D3F733D18EA4D83D1E3AB4ED78CAEC3614246F7C527CA8A731FBC8BA524D045F970652
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5052 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 5052 7zFM.exe Token: 35 5052 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5052 7zFM.exe