Overview
overview
10Static
static
10build.bat
windows10-ltsc_2021-x64
1builder/util/build.py
windows10-ltsc_2021-x64
3builder/ut...fig.py
windows10-ltsc_2021-x64
3builder/ut...env.py
windows10-ltsc_2021-x64
3builder/ut...ate.py
windows10-ltsc_2021-x64
3builder/ut...fig.py
windows10-ltsc_2021-x64
3main.py
windows10-ltsc_2021-x64
3src/compon...bug.py
windows10-ltsc_2021-x64
3src/compon...ion.py
windows10-ltsc_2021-x64
3src/compon...tup.py
windows10-ltsc_2021-x64
3src/compon...nfo.py
windows10-ltsc_2021-x64
3src/config.py
windows10-ltsc_2021-x64
3src/main.py
windows10-ltsc_2021-x64
3Resubmissions
27/07/2026, 13:12
260727-qfrdratakc27/07/2026, 13:10
260727-qenlgas1dt1023/08/2025, 17:09
250823-vn5cssgk2v1006/07/2025, 09:53
250706-lwn64sbj7x28/03/2025, 01:41
250328-b4ktjsz1ay10Analysis
- max time kernel
445s - max time network
448s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20250610-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20250610-enlocale:en-usos:windows10-ltsc_2021-x64system - submitted
23/08/2025, 17:09
Behavioral task
behavioral1
Sample
build.bat
Resource
win10ltsc2021-20250619-en
Behavioral task
behavioral2
Sample
builder/util/build.py
Resource
win10ltsc2021-20250610-en
Behavioral task
behavioral3
Sample
builder/util/config.py
Resource
win10ltsc2021-20250619-en
Behavioral task
behavioral4
Sample
builder/util/makeenv.py
Resource
win10ltsc2021-20250619-en
Behavioral task
behavioral5
Sample
builder/util/obfuscate.py
Resource
win10ltsc2021-20250610-en
Behavioral task
behavioral6
Sample
builder/util/writeconfig.py
Resource
win10ltsc2021-20250619-en
Behavioral task
behavioral7
Sample
main.py
Resource
win10ltsc2021-20250610-en
Behavioral task
behavioral8
Sample
src/components/antidebug.py
Resource
win10ltsc2021-20250619-en
Behavioral task
behavioral9
Sample
src/components/injection.py
Resource
win10ltsc2021-20250619-en
Behavioral task
behavioral10
Sample
src/components/startup.py
Resource
win10ltsc2021-20250619-en
Behavioral task
behavioral11
Sample
src/components/systeminfo.py
Resource
win10ltsc2021-20250610-en
Behavioral task
behavioral12
Sample
src/config.py
Resource
win10ltsc2021-20250425-en
Behavioral task
behavioral13
Sample
src/main.py
Resource
win10ltsc2021-20250610-en
General
- Target builder/util/build.py
- Size 2KB
- Sample250823-vn5cssgk2v
- SHA256 ae2d7a498db4f1ea8d4cf1f71a9a60e0379a8b6e287d2c8b7cd2262f45b2d88c
- MD5 b972c3bd98189fef3649132428a6b5d5
- SHA1 2f9a0e3bb364be7614062a716e97065df9d091c3
- SHA512 b9e9281168c684a8136f299e50293d2d0c0fc92c70ee482a7ed27f1340627c628c0347ab36ee33c72ace95595d2111ee103fbb1ead1e0dbe55a3e85dd2f644f8
- MD5 SHA1 SHA512
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1666585949-2086230170-2304269057-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-1666585949-2086230170-2304269057-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3752 OpenWith.exe