88c1feb86ac3ce3942c1452cd728cf8d0364c845c72cd50403692094e3c438a2

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 10:17

Target
Kult Clean Source.rar
Size 9.5MB
Sample261027-mbfvnsds2q
SHA256 88c1feb86ac3ce3942c1452cd728cf8d0364c845c72cd50403692094e3c438a2
MD5 069ff6fd68fb0cf56b0261af415e7935
SHA1 9fe5edb4bb9e385b6733598a38052bb577d5e07a
SHA512 9892389f7b3b9ee6a16b7e765d939c7494211c2cb6301bf043f3a56b386d58a7af0ef07f07cbc208d180eb3c10e9377c2f3b59d854b0853311b64fdfbebbded7
SSDEEP 196608:PTKk3JD7RFCUVGWNlK5lgQqsviP66Xw9UeVktcOVDx/fQCGf:bJvCMGWogwfNKQuVgf
TLSH
T10EA63337A77CF54503A7ADF9BA9042312E71E59017098F296B7884FF827825B0869D3F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4768	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	4768	7zFM.exe
Token: 35	4768	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4768	7zFM.exe