Analysis
- max time kernel
298s - max time network
132s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/10/2026, 13:26
Static task
static1
Behavioral task
behavioral1
Sample
MSPro.rar
Resource
win10v2004-20260911-en
3 signatures
300 seconds
Behavioral task
behavioral2
Sample
MSPro.rar
Resource
win11ltsc2024-20260911-en
3 signatures
300 seconds
General
- Target MSPro.rar
- Size 100.0MB
- Sample261024-qp1zjsfa64
- SHA256 8abc751ae3d8baa6bbb5bf7f4b633425e94617bd95ab1cfed887270f8d040e55
- MD5 4c2c974d060ee63bc0e3ef975fbba902
- SHA1 a23daa8e1418f291ea51568c748d9fd571e56ff7
- SHA512 9b9847c4c549cdabfe0d66d055d9e79ed296e922358a3cf15f2760a3cd826001a4b63f5ee5c74888ffcb608eeb4e7b60a1508cf28e080a18861aa05a3b8e3ed7
- SSDEEP 3145728:60226g0zatlVvdF0OPHZ+L5SoeZ0Y6M1t:H226g06lZR+L5Soxo
- TLSH T1AD38330C7A9C17415FB858EF91699C25C6B35AD091FC52B828ECB81BC7C8D67A0F5B8C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 4256 7zFM.exe Token: 35 4256 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4256 7zFM.exe