0680d0e389203632372c714465b831aef749aa1c3b3ea5e85500ed92f79696df

Analysis

max time kernel
150s
max time network
131s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 03:46

Target
dlss_5_swapper.rar
Size 93.2MB
Sample261027-ebvd3ax14k
SHA256 0680d0e389203632372c714465b831aef749aa1c3b3ea5e85500ed92f79696df
MD5 68d51c722baefe7d23acce5ef4edd64d
SHA1 86c1b8cd83c3ee3c778e11e76ac8a240daed3ed6
SHA512 8ccf60f0908e59b2a4227a98be9dc80632a264366ef4b79818f796e8b19ab1950a1c850422bb531d52a6301dc76efe8d9075ccc8c7b081327673e65a7d3affd2
SSDEEP 1572864:7zU9FViTkyki+eXXkGiVjxpYmce19cnrbOg5LCwY4QVjqIoHEqhsmuwaT/:XUpiT+i+e05xY3ucnPOeLzIjokc8F
TLSH
T1FD28339219557FBA1FDD507F52720363B8C2AF39966211998D887EF9F0B30F8E9B4024
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4580	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	4580	7zFM.exe
Token: 35	4580	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4580	7zFM.exe