Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/10/2026, 14:04
Static task
static1
Behavioral task
behavioral1
Sample
CCS_Free v2.1.rar
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
CCS_Free v2.1.rar
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
General
- Target CCS_Free v2.1.rar
- Size 78KB
- Sample261024-rdbe7azt8j
- SHA256 2eb2b45d060a47ca409dd8623e6eb314295ec6a60edcba591b660f22421a5900
- MD5 2447c0bca8133c8e347f4a7943db26f7
- SHA1 c13307ae5f1099174d9a2b496881441a7da4cc85
- SHA512 a0b502ef1ba1e3565d5d0ec0e82fc5d33a0a740e17b6d73eaf44ebd494cb537746c75d044c89d8a75637788b294bd795c69432ba310ea9fc4d56d5409a0c6237
- SSDEEP 1536:f3aGPMdNB3aFXhBxdAfwFPDdWCOYEY5yGLYuA32nM55Kk4UFUfQLNIUs9OD:fIH3aHLCwFPDdWCbtoG8uhMSHW1RD
- TLSH T14C731221174EF7BBBCD7AF835259B793F074926F86B51B063504ADCE2EA1C18A5C40AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5876 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 5876 7zFM.exe Token: 35 5876 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5876 7zFM.exe