Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
17/10/2026, 22:04
Static task
static1
Behavioral task
behavioral1
Sample
luh rce.7z
Resource
win10v2004-20260911-en
36 signatures
150 seconds
Behavioral task
behavioral2
Sample
luh rce.7z
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target luh rce.7z
- Size 12.7MB
- Sample261017-1zcd2sxt2n
- SHA256 078093e4ba339e76b4155ac98149c4faca4b583b5e547a44499e1cf700ed088b
- MD5 7f3405c377b06896cf2acf30e8c6cf48
- SHA1 8ad7fcedd78b6ab13d035d33300e3f59dcfd479a
- SHA512 b9a2aa8420a1fcfb3826b4ff730af7a7b8ad62baf8e7ac3dc8ae262a741031ba51ab275b8bbb6bb4ffd80b029560f5daffbfd185c4286ab303457d980b19ab2b
- SSDEEP 393216:xhS4SjgGu/NCjc1N7R3V+F989gFoZ4Ua8aR:64ZGuyAR3AFfoZ/aR
- TLSH T1CDD63359B7FB678CF3CA51292E98F3B7F91A625085B7315B8C4315B609C6CC0488A2FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2532 7zFM.exe Token: 35 2532 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2532 7zFM.exe