Overview
overview
10Static
static
3My Trip 2026.rar
windows11-21h2-x64
10My Trip 2026.exe
windows11-21h2-x64
10$PLUGINSDI...em.dll
windows11-21h2-x64
3$PROGRAMFI...geusia
windows11-21h2-x64
1Unwwoven/Camalig.ini
windows11-21h2-x64
3Unwwoven/Cowboyen.txt
windows11-21h2-x64
3Unwwoven/E...91.txt
windows11-21h2-x64
3Unwwoven/H...ne.jpg
windows11-21h2-x64
Unwwoven/H...er.txt
windows11-21h2-x64
3Unwwoven/I...er.dia
windows11-21h2-x64
3Unwwoven/Karnfle.jpg
windows11-21h2-x64
Unwwoven/R...rs.txt
windows11-21h2-x64
3Unwwoven/a...en.ini
windows11-21h2-x64
3Unwwoven/a...li.dem
windows11-21h2-x64
3Unwwoven/d...te.txt
windows11-21h2-x64
3Unwwoven/f...er.jpg
windows11-21h2-x64
Unwwoven/k...gs.txt
windows11-21h2-x64
3Unwwoven/m...es.ini
windows11-21h2-x64
3Unwwoven/m...al.ini
windows11-21h2-x64
3precontention.els
windows11-21h2-x64
3project.txt
windows11-21h2-x64
3snobs.jpg
windows11-21h2-x64
tagvindues.tee
windows11-21h2-x64
3tantaluskvaler.ini
windows11-21h2-x64
3thomsonite.ini
windows11-21h2-x64
3Analysis
- max time kernel
298s - max time network
274s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
01/03/2026, 14:36
Static task
static1
Behavioral task
behavioral1
Sample
My Trip 2026.rar
Resource
win11-20260130-en
Behavioral task
behavioral2
Sample
My Trip 2026.exe
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260130-en
Behavioral task
behavioral4
Sample
$PROGRAMFILES/unguards/Hypergeusia
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
Unwwoven/Camalig.ini
Resource
win11-20260130-en
Behavioral task
behavioral6
Sample
Unwwoven/Cowboyen.txt
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
Unwwoven/Excentrikers91.txt
Resource
win11-20260130-en
Behavioral task
behavioral8
Sample
Unwwoven/Hjernearbejderne.jpg
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
Unwwoven/Huskesedler.txt
Resource
win11-20260130-en
Behavioral task
behavioral10
Sample
Unwwoven/Ironmaster.dia
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
Unwwoven/Karnfle.jpg
Resource
win11-20260130-en
Behavioral task
behavioral12
Sample
Unwwoven/Redningsmodellers.txt
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
Unwwoven/antennemodtageren.ini
Resource
win11-20260130-en
Behavioral task
behavioral14
Sample
Unwwoven/astragali.dem
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
Unwwoven/direktrskifte.txt
Resource
win11-20260130-en
Behavioral task
behavioral16
Sample
Unwwoven/forbindskasser.jpg
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
Unwwoven/kategoriserings.txt
Resource
win11-20260130-en
Behavioral task
behavioral18
Sample
Unwwoven/materialiseredes.ini
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
Unwwoven/microcrystal.ini
Resource
win11-20260130-en
Behavioral task
behavioral20
Sample
precontention.els
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
project.txt
Resource
win11-20260130-en
Behavioral task
behavioral22
Sample
snobs.jpg
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
tagvindues.tee
Resource
win11-20260130-en
Behavioral task
behavioral24
Sample
tantaluskvaler.ini
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
thomsonite.ini
Resource
win11-20260130-en
General
- Target Unwwoven/antennemodtageren.ini
- Size 559B
- Sample260301-ryw8dsd18e
- SHA256 16a32bf2b21fe291b5064486535fb1021c57bc1d1363256a899ae15a99fd476c
- MD5 3d1d0c586842e94d11c49e11cd0611cc
- SHA1 2af984f42f1afe10d559cbf2dd7b7f1a82a268e8
- SHA512 252f996414f6769ebeef74e9b625d7b4b09bd6177a624e942ffea82bc06412aae6b91c241e159cfb540f51033803bfdcbd972babd9e0abd1860e91afe26f825f
- TLSH T106F0EB08BC320A138E8BCAC6FF4A1928058E52289616E0097222136BA2868CCD277708
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-747994418-3253881032-1527946131-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-747994418-3253881032-1527946131-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2456 OpenWith.exe