Overview
overview
10Static
static
3My Trip 2026.rar
windows11-21h2-x64
10My Trip 2026.exe
windows11-21h2-x64
10$PLUGINSDI...em.dll
windows11-21h2-x64
3$PROGRAMFI...geusia
windows11-21h2-x64
1Unwwoven/Camalig.ini
windows11-21h2-x64
3Unwwoven/Cowboyen.txt
windows11-21h2-x64
3Unwwoven/E...91.txt
windows11-21h2-x64
3Unwwoven/H...ne.jpg
windows11-21h2-x64
Unwwoven/H...er.txt
windows11-21h2-x64
3Unwwoven/I...er.dia
windows11-21h2-x64
3Unwwoven/Karnfle.jpg
windows11-21h2-x64
Unwwoven/R...rs.txt
windows11-21h2-x64
3Unwwoven/a...en.ini
windows11-21h2-x64
3Unwwoven/a...li.dem
windows11-21h2-x64
3Unwwoven/d...te.txt
windows11-21h2-x64
3Unwwoven/f...er.jpg
windows11-21h2-x64
Unwwoven/k...gs.txt
windows11-21h2-x64
3Unwwoven/m...es.ini
windows11-21h2-x64
3Unwwoven/m...al.ini
windows11-21h2-x64
3precontention.els
windows11-21h2-x64
3project.txt
windows11-21h2-x64
3snobs.jpg
windows11-21h2-x64
tagvindues.tee
windows11-21h2-x64
3tantaluskvaler.ini
windows11-21h2-x64
3thomsonite.ini
windows11-21h2-x64
3Analysis
- user interaction
yes - max time kernel
298s - max time network
280s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
01/03/2026, 14:36
Static task
static1
Behavioral task
behavioral1
Sample
My Trip 2026.rar
Resource
win11-20260130-en
Behavioral task
behavioral2
Sample
My Trip 2026.exe
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260130-en
Behavioral task
behavioral4
Sample
$PROGRAMFILES/unguards/Hypergeusia
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
Unwwoven/Camalig.ini
Resource
win11-20260130-en
Behavioral task
behavioral6
Sample
Unwwoven/Cowboyen.txt
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
Unwwoven/Excentrikers91.txt
Resource
win11-20260130-en
Behavioral task
behavioral8
Sample
Unwwoven/Hjernearbejderne.jpg
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
Unwwoven/Huskesedler.txt
Resource
win11-20260130-en
Behavioral task
behavioral10
Sample
Unwwoven/Ironmaster.dia
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
Unwwoven/Karnfle.jpg
Resource
win11-20260130-en
Behavioral task
behavioral12
Sample
Unwwoven/Redningsmodellers.txt
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
Unwwoven/antennemodtageren.ini
Resource
win11-20260130-en
Behavioral task
behavioral14
Sample
Unwwoven/astragali.dem
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
Unwwoven/direktrskifte.txt
Resource
win11-20260130-en
Behavioral task
behavioral16
Sample
Unwwoven/forbindskasser.jpg
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
Unwwoven/kategoriserings.txt
Resource
win11-20260130-en
Behavioral task
behavioral18
Sample
Unwwoven/materialiseredes.ini
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
Unwwoven/microcrystal.ini
Resource
win11-20260130-en
Behavioral task
behavioral20
Sample
precontention.els
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
project.txt
Resource
win11-20260130-en
Behavioral task
behavioral22
Sample
snobs.jpg
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
tagvindues.tee
Resource
win11-20260130-en
Behavioral task
behavioral24
Sample
tantaluskvaler.ini
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
thomsonite.ini
Resource
win11-20260130-en
General
- Target Unwwoven/Ironmaster.dia
- Size 1.1MB
- Sample260301-ryw8dsd18e
- SHA256 ccd91e437ceb3193aa07e6c49642176d90a31322d1f5fdb1f87f0989ec45d5d7
- MD5 fc5c1aaa5f3d985ccc58e5469783f9c5
- SHA1 44efd73d96becc059032afa11fd7bbb1e023816e
- SHA512 d4abfed08045591a0d948aed97b4ddc7ae8a42ca97ebaa4cb4cae9e2209b1a1d8c2a76446dbbdb89a5ac184002b4d2f2f33bde07517a96f8f4d2ddbd7c9f04db
- SSDEEP 1536:fwPYfSTq3XuQjr9zxvmM57gAKYm+IWHAXO1urX8DvHQ/Fs/nftwYjGokbjIH7MPm:5
- TLSH T14F45F1CFB4827AD0302B9D3B4EB591A326226F44E984E37D6224CB51A571EECDA1CC90
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4980 OpenWith.exe