Analysis
- user interaction
yes - max time kernel
148s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
09/10/2026, 23:46
General
- Target smd vps by xt aizi.rar
- Size 25.4MB
- Sample261009-3sraqswvbz
- SHA256 72e7dde97ef445423a0a536fa78048694e059b1bb8d04f78336dcb639dd7c2ab
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of AdjustPrivilegeToken 3 IoCs
- Suspicious use of FindShellTrayWindow 2 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\smd vps by xt aizi.rar"1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
afterlife_pid14.dll
emulator_embedded_34404_at0x395060.bin
emulator_embedded_34404_at0x801cd0.bin
emulator_pid16.dll
relic_pid13.dll
launcher_main.py
loaders_index_executed.html
sellauth_deliver_current.php
sellauth_delivery_new.log