b2f3fe699dc862eeb3f471c0ee3075f5edfa7aa9f9eb3815cf34802f24112397

Analysis

max time kernel
898s
max time network
515s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260130-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260130-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
22/02/2026, 01:58

Target
The-MALWARE-Repo-master/Trojan/Malum.apk
Size 2.8MB
Sample260222-cdtt7sb16e
SHA256 b2f3fe699dc862eeb3f471c0ee3075f5edfa7aa9f9eb3815cf34802f24112397
MD5 28ac5460e68eb83737ae2d3cd4f1d49f
SHA1 97fc58ce2d7d952fe512856a0d3f52fa68329a9b
SHA512 1ef7ed4de0157378e07380c6b493da7f53b3b7c5d419fb1d1a60d16a5403cdce38645d22bf0c0d9dc2e2ea2ceee5ccf1b9a8e8e34d88a033fa9ad1ec7a8d73b1
SSDEEP 49152:Sy/CzDrC83iwfDGubWhgGcWyctCo/vqJoh2Jbbv6G4Xnx+DVI3oVFe:f/srCsTWhg8y3UCJJJnv6FR3ove
TLSH
T16FD522A17324BE5AECB645738656C626C3352E8407636FD3775D363C2BBBE800B805A7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1653660789-1211287304-2482568781-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-1653660789-1211287304-2482568781-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
64	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\The-MALWARE-Repo-master\Trojan\Malum.apk
1⤵
- Modifies registry class
PID:4784

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact