fcb81618bb15edfdedfb638b4c08a2af9cac9ecfa551af135a8402bf980375cf

Resubmissions

01/04/2026, 02:02

260401-cgd8xsfy5q3

31/03/2026, 10:57

260331-m2ckyahw4q3

Analysis

max time kernel
149s
max time network
94s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
31/03/2026, 10:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ld.py
Size 12KB
Sample260331-m2ckyahw4q
SHA256 fcb81618bb15edfdedfb638b4c08a2af9cac9ecfa551af135a8402bf980375cf
MD5 9663665850cdd8fe12e30a671e5c4e6f
SHA1 59faac136680104948e083b3b67a70af9bfa5d5e
SHA512 d51b377f7fc437c326b562d861872444c19fb8e89c319110c9b7a09d3d570295e90806b18ebbf964166ca54f86632a4d9f862cead8e6a82cc25584180ff58858
SSDEEP 192:V+OTSQFF3MjzSCII7s32HaYo5uuFe0+60U2WICd/tPQTnd/Y+cLL2dPj47Hp79Bb:V+OTJRCII7sRdI8mT+IkUAsQ
TLSH
T129423016CC2E68028DF2921D9C27C1A5F714635717262913BEFCD25C2F348A2D1F9ABE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1456842261-3464001825-2855069093-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-1456842261-3464001825-2855069093-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5544	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\ld.py
1⤵
- Modifies registry class
PID:3512

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:5544

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads