Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/11/2026, 22:36
Static task
static1
Behavioral task
behavioral1
Sample
ATIVADOR PROCESS LASSO.rar
Resource
win10v2004-20260911-en
26 signatures
150 seconds
Behavioral task
behavioral2
Sample
ATIVADOR PROCESS LASSO.rar
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
General
- Target ATIVADOR PROCESS LASSO.rar
- Size 648KB
- Sample261104-2jckjsvybw
- SHA256 47a871b1f5aafcd87736f6b6c4efa45ce621447ff1e0e42c3d86c3bf5afe9861
- MD5 57adcc1b9b3212d5cf0fca62be076b76
- SHA1 a7675b90698273363efa3974db4e2d77c0dec75a
- SHA512 522a14022bb27d9d9c88fd0577e77a6453095201adae88280ac71f44c72ef7ef6aa4e852bdda9bcfdb4fe1816b8abc2e3bb3d04de917e39bbc1e296d2ec5ba23
- SSDEEP 12288:aLxyjabJ8Dguh1ky16JndKuKB3M4shpHXsm5K9ORuYk:ORasuh1/6e/mlEm8MYYk
- TLSH T114E423DBC0191A95E3CC69372EC1207E9B83310AEA98D8D6BC5D524549C52FBBF642CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3780 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3780 7zFM.exe Token: 35 3780 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3780 7zFM.exe