Analysis
- user interaction
yes - max time kernel
149s - max time network
143s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260911-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
15/10/2026, 19:25
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Cities_Skylines.rar
Resource
win10ltsc2021-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
steam_api64.dll
Resource
win10ltsc2021-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
steam_api64_o.dll
Resource
win10ltsc2021-20260911-en
0 signatures
150 seconds
General
- Target Cities_Skylines.rar
- Size 1.1MB
- Sample261015-x412esbz21
- SHA256 b5584952713b807bdd4605e343bcd3a1efef7a787c8c0f736027e1d87bb72b80
- MD5 3a9258d22a51925fba49a864d2dbdca8
- SHA1 be2e333e7095af8541046ccd548bfc9e554e2ed8
- SHA512 f6007908466d7ce21385d30d5d90b219857ad499f5b7f45b6db4f525be80a04f6edc8f6040abeb8117bf5b8f3f6fb3cfe754e1017381603a5c0653f0164141b0
- SSDEEP 24576:RnIRFATI1cM9ZMvF6v06W4bJ3APgk3L4FSaxgWHIE3ZKBDWfNHB:tucM9+vF6s6W4uIk3UoaSW1Zsalh
- TLSH T14D3533C61E9C9E1EC467B3F6DA729D14EB1381CED275760DE401E0E2356B2978C0B1AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4844 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4844 7zFM.exe Token: 35 4844 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4844 7zFM.exe