Analysis
- user interaction
yes - max time kernel
148s - max time network
135s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/10/2026, 17:33
Static task
static1
Behavioral task
behavioral1
Sample
httpstinyurl.commycpm6r.7z
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
httpstinyurl.commycpm6r.7z
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target httpstinyurl.commycpm6r.7z
- Size 3.1MB
- Sample261020-v411bace85
- SHA256 13b5b7e3d43e39e1d47df8c3374cb6c481afcb7d1f452f70aa5bc79c1f8096e2
- MD5 b163df19ea989709f99dab169d5dd833
- SHA1 53f112a139fbffb413edca5e141fd19f90ac0f6d
- SHA512 80e9c1f021ee9b4c408a85b65363934c5ecbcea0978c12ae022c3f651e736d5975bd2fd0127e8645dd25627e65086a86e3ce074ce669078c83698cd15223acae
- SSDEEP 98304:aLaAk3Blw0lOfJIlIih2CK/d6cVygiCjQli8eXN:7Ak3zpc2Zhe/VVtdjQAl
- TLSH T11AE53360E0B3D5CDDE97A7541A6A78F4EC87C989F0D83019FA11E37D21BCDAB84A1D24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4284 7zFM.exe Token: 35 4284 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4284 7zFM.exe