d1a64f8b69e5793cceb24a803fcb136dcf082e0c0a6c99eeccc56ef143912211

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 20:36

Target
GTS.rar
Size 4.7MB
Sample261102-zdrfeafs8l
SHA256 d1a64f8b69e5793cceb24a803fcb136dcf082e0c0a6c99eeccc56ef143912211
MD5 c2063ffc306b6b48f7a3cc9216508756
SHA1 1a67b55a0c575a418cc8355c9f99afa1f4b85b12
SHA512 28ab24b482fabf152fe43ad1a738d2680939f8055e3dde888973088a3d26f42bdacea4bee70552311c7ab13fba2c0a8d35da6187f909c31d7a1edfb9697b3f34
SSDEEP 98304:f+Ogaj9ql4RKTtL3h9H3gaj9ql4RKTt4X1TFqHU+AZIt1JCm89+njTZLn:f+2j93C3hdzj93fdFcUkq9+n/ZLn
TLSH
T10C3633A6B63102D21FF0316FF60060922DCEDA9B4649AD572D5437533CCAD97BDB3A28
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4600	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	4600	7zFM.exe
Token: 35	4600	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4600	7zFM.exe