Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
01/10/2026, 09:37
Static task
static1
Behavioral task
behavioral1
Sample
purchase order.rar
Resource
win10v2004-20260911-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
purchase order.rar
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
officlogs_ritubohara.com_093026pgpn.js
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Behavioral task
behavioral4
Sample
officlogs_ritubohara.com_093026pgpn.js
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
General
- Target purchase order.rar
- Size 485KB
- Sample261001-llke6stcrd
- SHA256 2b53db8f2a67b954f4e120dbf03fbac62edbcad4438141416d2b3a18c90ee249
- MD5 c7a17f54a2229f3294be0b95bafb87e7
- SHA1 652ba214bb741bdde6a9b79f7ccd7c2c3c77d849
- SHA512 c11daa603988077ea80702143d59204416f7c85be9196f01d0b212d04e2a2f3613b840156db5e776fdaf5fdd12ad5a17c52e5c6ec7b3fb7170429512cb86fcaa
- SSDEEP 12288:hkHdOO3sqybUnq9YZ+TvHYvbSE5Qy2B5VqBQ:hkHdBcoq9YZ+TYX5Qy2B5VgQ
- TLSH T168B423CACC3DA09885B42C4F95A17DF760C61F50F86C1F8CA991495492BD0B9EE3A4FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1212 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1212 7zFM.exe Token: 35 1212 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1212 7zFM.exe