Overview
overview
5Static
static
5Files/DSK_...ey.pub
windows10-2004-x64
3Files/DSK_...ey.pub
windows11-21h2-x64
3Files/Desk...e.docx
windows10-2004-x64
1Files/Desk...e.docx
windows11-21h2-x64
1Files/Desk...07.pdf
windows10-2004-x64
3Files/Desk...07.pdf
windows11-21h2-x64
3Files/Desk...25.pdf
windows10-2004-x64
3Files/Desk...25.pdf
windows11-21h2-x64
3Files/Desk...n.docx
windows10-2004-x64
1Files/Desk...n.docx
windows11-21h2-x64
1Files/Desk...en.pdf
windows10-2004-x64
3Files/Desk...en.pdf
windows11-21h2-x64
3Files/Desk...f.docx
windows10-2004-x64
1Files/Desk...f.docx
windows11-21h2-x64
1Files/Desk...uf.pdf
windows10-2004-x64
3Files/Desk...uf.pdf
windows11-21h2-x64
3Files/Desk...x.docx
windows10-2004-x64
1Files/Desk...x.docx
windows11-21h2-x64
1Files/Desk...nx.pdf
windows10-2004-x64
3Files/Desk...nx.pdf
windows11-21h2-x64
3Files/Desk...WB.pdf
windows10-2004-x64
3Files/Desk...WB.pdf
windows11-21h2-x64
3Files/Desk...22.pdf
windows10-2004-x64
3Files/Desk...22.pdf
windows11-21h2-x64
3Files/Desk...61.pdf
windows10-2004-x64
3Files/Desk...61.pdf
windows11-21h2-x64
3Files/Desk...1).pdf
windows10-2004-x64
3Files/Desk...1).pdf
windows11-21h2-x64
3Files/Desk...ie.pdf
windows10-2004-x64
3Files/Desk...ie.pdf
windows11-21h2-x64
3Files/Desk...e.docx
windows10-2004-x64
1Files/Desk...e.docx
windows11-21h2-x64
1Analysis
- max time kernel
149s - max time network
151s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
16/04/2026, 12:31
Behavioral task
behavioral1
Sample
Files/DSK_23_Wal_Key/Users/lucaaccoto/.android/adbkey.pub
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
Files/DSK_23_Wal_Key/Users/lucaaccoto/.android/adbkey.pub
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
Files/Desktop/Lena/Brief_PamerRosmarie.docx
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
Files/Desktop/Lena/Brief_PamerRosmarie.docx
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
Files/Desktop/Lena/Dokumente 2024/20240304131507.pdf
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
Files/Desktop/Lena/Dokumente 2024/20240304131507.pdf
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
Files/Desktop/Lena/Lebenslauf 19.10.25.pdf
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
Files/Desktop/Lena/Lebenslauf 19.10.25.pdf
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
Files/Desktop/Lena/Lebenslauf ohne Daten.docx
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
Files/Desktop/Lena/Lebenslauf ohne Daten.docx
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
Files/Desktop/Lena/Lebenslauf ohne Daten.pdf
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
Files/Desktop/Lena/Lebenslauf ohne Daten.pdf
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
Files/Desktop/Lena/Lebenslauf.docx
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
Files/Desktop/Lena/Lebenslauf.docx
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
Files/Desktop/Lena/Lebenslauf.pdf
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
Files/Desktop/Lena/Lebenslauf.pdf
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
Files/Desktop/Lena/Motivationsschreiben Dinx.docx
Resource
win10v2004-20260130-en
Behavioral task
behavioral18
Sample
Files/Desktop/Lena/Motivationsschreiben Dinx.docx
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
Files/Desktop/Lena/Motivationsschreiben Dinx.pdf
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
Files/Desktop/Lena/Motivationsschreiben Dinx.pdf
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
Files/Desktop/Lena/Motivationsschreiben GWB.pdf
Resource
win10v2004-20260130-en
Behavioral task
behavioral22
Sample
Files/Desktop/Lena/Motivationsschreiben GWB.pdf
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
Files/Desktop/Lena/Steuererklaerung 2022/Quietanze F24 2022.pdf
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
Files/Desktop/Lena/Steuererklaerung 2022/Quietanze F24 2022.pdf
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
Files/Desktop/Lena/Steuererklaerung 2022/Rechnung Südtirol Pass - Fattura AltoAdige Pass FVMOB21_0235361.pdf
Resource
win10v2004-20260130-en
Behavioral task
behavioral26
Sample
Files/Desktop/Lena/Steuererklaerung 2022/Rechnung Südtirol Pass - Fattura AltoAdige Pass FVMOB21_0235361.pdf
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
Files/Desktop/Lena/Steuererklaerung 2022/Rechnung Südtirol Pass - Fattura AltoAdige Pass FVMOB22_0063753 (1).pdf
Resource
win10v2004-20260130-en
Behavioral task
behavioral28
Sample
Files/Desktop/Lena/Steuererklaerung 2022/Rechnung Südtirol Pass - Fattura AltoAdige Pass FVMOB22_0063753 (1).pdf
Resource
win11-20260130-en
Behavioral task
behavioral29
Sample
Files/Desktop/Lena/Steuererklaerung 2022/Spese sanitarie.pdf
Resource
win10v2004-20260130-en
Behavioral task
behavioral30
Sample
Files/Desktop/Lena/Steuererklaerung 2022/Spese sanitarie.pdf
Resource
win11-20260130-en
Behavioral task
behavioral31
Sample
Files/Desktop/Lena/Uebungen/Beispiele.docx
Resource
win10v2004-20260130-en
Behavioral task
behavioral32
Sample
Files/Desktop/Lena/Uebungen/Beispiele.docx
Resource
win11-20260130-en
General
- Target Files/DSK_23_Wal_Key/Users/lucaaccoto/.android/adbkey.pub
- Size 716B
- Sample260416-pp3mpsfv2q
- SHA256 a762a34eb00fd8d20a7397d14ccb53f6ecea0a4d65cc4d57189b024a6d6a6f30
- MD5 f8f673fc028d5405e9b183f266ad2683
- SHA1 65764a008c933cd653b346953081080b4ed58c16
- SHA512 085a694967193f3ecc63b9c1e4eacd926386a5040fd20acbcf29a9841c5a3dae8bba58037cfe3bab6024d53876f3b8d460fcf5eb15bd91b98b9899bc9bc570eb
- TLSH T1E90194809D36180345304A1CEBC3E45C728887C8240C36E2523BA5FA5EF4084073B359
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3468 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Files\DSK_23_Wal_Key\Users\lucaaccoto\.android\adbkey.pub1⤵
- Modifies registry class
PID:788
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3468