6ccfb5e3ed460d8770464e8bb77d2b75900bc73bb7cae5b22dd55dd080a0f59c

Analysis

user interaction
yes
max time kernel
298s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/10/2026, 01:58

Target
rx.rar
Size 20.0MB
Sample261030-cdz18ada63
SHA256 6ccfb5e3ed460d8770464e8bb77d2b75900bc73bb7cae5b22dd55dd080a0f59c
MD5 be2dba70ec8a3a4dc5bdc49b7b7507f5
SHA1 5cb053e01117407de3cfa5992fa7d4d27becaa9f
SHA512 49340602aba9d80ce3d0a6e1064a6aaee8a030ed1ae603098cd0dcdf4fa7ae4daa7cdb76f2efc059d0acf7bf9f043b8619833f599bb6eacbb238881420d6b596
SSDEEP 393216:noQhJ9PAPI+eb/N1PB6aOkNzuuTQZGCbKP6nUkMoWSHcy2c5rpS:noRCbVhVNKSQZLWCnUjvSHP2chg
TLSH
T18A2733BC2ACD6299B2D663C67F402521D8CA9CA33FEDE5F540B2CD874744C81CB2AD65
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
4984	Rx woofer crack.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2108	7zFM.exe
2108	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2108	7zFM.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
2108	7zFM.exe
2108	7zFM.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 2108 wrote to memory of 4984	2108	7zFM.exe	89

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\rx.rar"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2108
- C:\Users\Admin\AppData\Local\Temp\7zOC3850B29\Rx woofer crack.exe
  "C:\Users\Admin\AppData\Local\Temp\7zOC3850B29\Rx woofer crack.exe"
  2⤵
  - Executes dropped EXE
  PID:4984

Rx woofer crack.exe

Path C:\Users\Admin\AppData\Local\Temp\7zOC3850B29\Rx woofer crack.exe
Size 9.6MB
SHA256 16014d788a6928f68e0e96f154784379ef9b048c117bc3ecbdf3a8177def23d1
MD5 26953cb0809347fc779f2382513c3566
SHA1 43367b8e46174abf6f1d205308ea080c2baad5c7
SHA512 0463bb59d7b2574da1036d2aafc6c0e96d3498cc171cd470ebca879a07fbcb28fcd80da00a009a267b8f4b60fc29eaa3a80dd8548302ed820fb567e0b3c6c5e1
SSDEEP 196608:bvb9Z/PLEKLJ9hZ8w6Qp3BVzMHF/3+ppi:r7/PLNhZ84rVzeF/uX
TLSH
T177A61243E3E9415AD023A638C742971BE3727418073487DBBFD4195EDBAB9E0AB76B40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download