Overview
overview
10Static
static
10sysdiagnos...tar.gz
windows10-2004-x64
1sysdiagnos...tar.gz
windows11-ltsc_2024-x64
1sysdiagnos...71.tar
windows10-2004-x64
1sysdiagnos...71.tar
windows11-ltsc_2024-x64
1sysdiagnos...ME.txt
windows10-2004-x64
1sysdiagnos...ME.txt
windows11-ltsc_2024-x64
1sysdiagnos...se.txt
windows10-2004-x64
1sysdiagnos...se.txt
windows11-ltsc_2024-x64
1sysdiagnos...ts.txt
windows10-2004-x64
1sysdiagnos...ts.txt
windows11-ltsc_2024-x64
1sysdiagnos...us.txt
windows10-2004-x64
1sysdiagnos...us.txt
windows11-ltsc_2024-x64
1sysdiagnos...tl.txt
windows10-2004-x64
1sysdiagnos...tl.txt
windows11-ltsc_2024-x64
1sysdiagnos...ks.txt
windows10-2004-x64
1sysdiagnos...ks.txt
windows11-ltsc_2024-x64
1sysdiagnos...se.txt
windows10-2004-x64
1sysdiagnos...se.txt
windows11-ltsc_2024-x64
1sysdiagnos...ty.csv
windows10-2004-x64
1sysdiagnos...ty.csv
windows11-ltsc_2024-x64
1sysdiagnos...ty.txt
windows10-2004-x64
1sysdiagnos...ty.txt
windows11-ltsc_2024-x64
1sysdiagnos...ug.txt
windows10-2004-x64
1sysdiagnos...ug.txt
windows11-ltsc_2024-x64
1sysdiagnos...redump
windows10-2004-x64
3sysdiagnos...redump
windows11-ltsc_2024-x64
3sysdiagnos...op.txt
windows10-2004-x64
1sysdiagnos...op.txt
windows11-ltsc_2024-x64
1sysdiagnos...nt.txt
windows10-2004-x64
1sysdiagnos...nt.txt
windows11-ltsc_2024-x64
1sysdiagnos...ft.log
windows10-2004-x64
1sysdiagnos...ft.log
windows11-ltsc_2024-x64
1Analysis
- max time kernel
150s - max time network
170s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
06/10/2026, 01:38
Behavioral task
behavioral1
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71.tar.gz
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71.tar.gz
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71.tar
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71.tar
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._README.txt
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._README.txt
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._acdiagnose.txt
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._acdiagnose.txt
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._apfs_stats.txt
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._apfs_stats.txt
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._ckksctl_status.txt
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._ckksctl_status.txt
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._codecctl.txt
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._codecctl.txt
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._disks.txt
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._disks.txt
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._hpmDiagnose.txt
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._hpmDiagnose.txt
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._jetsam_priority.csv
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._jetsam_priority.csv
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._jetsam_priority.txt
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._jetsam_priority.txt
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._kbdebug.txt
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._kbdebug.txt
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._lsaw.csstoredump
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._lsaw.csstoredump
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._ltop.txt
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._ltop.txt
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._mount.txt
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._mount.txt
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._night-shift.log
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71/._night-shift.log
Resource
win11ltsc2024-20260911-en
General
- Target sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71.tar.gz
- Size 281.1MB
- Sample261006-b2evhsybmc
- SHA256 71aff755cd6f972fd22e66f0dcec0d118d6d70be2961ce61b6b4819f8f4a725d
- MD5 590db43adb838fb4d06b44be9825257d
- SHA1 f940948da9f9f02cffacc5431103f35bf71d5a88
- SHA512 5897979f8d0085a0b47954bf3b30ad8d4ae5ec8f994743b59d4cdae9bb54a7c53ee905d496858723870eb875465c59deedf92787d4daaa944e306351c1ee343d
- SSDEEP 6291456:Zl1Z55hUTVvzX8quntvIPY9IIQ/xFWUBR+LgO7wxFGvHlMgI:Zl18X8XtAQ7zgO0xotMgI
- TLSH T129E83389D9F36E4FB367A270E733E46CA2A414EA059D9506683C57ED10CB3A1E70F50B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5856 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 5856 7zFM.exe Token: 35 5856 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5856 7zFM.exe
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\sysdiagnose_2026.08.31_20-32-51-0600_iPhone-OS_iPhone_23G71.tar.gz"1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:5856