dd8ab0629dd7f4fe57d6843e4101f6c5bb1291e490b0637b75b1d8f05da98bdc

Resubmissions

18/04/2026, 00:58

260418-bbscxset4v3

18/04/2026, 00:56

18/04/2026, 00:49

18/04/2026, 00:46

18/04/2026, 00:44

18/04/2026, 00:44

Analysis

user interaction
yes
max time kernel
149s
max time network
93s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
18/04/2026, 00:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Non confirmé 38711.zip
Size 12.0MB
Sample260418-a4pbashz4n
SHA256 dd8ab0629dd7f4fe57d6843e4101f6c5bb1291e490b0637b75b1d8f05da98bdc
MD5 e8d6cab4ef258575ef3dbfe39dd1e2ed
SHA1 7e7761877ba2dbdb9f1bb798a8612eebf6d1ca20
SHA512 5f4535ca653382f2e8e1ba5e52cd1351e137c415d80cdfe59fd304df696ed4bb9a46dff352bbfe261a127c381a068e4e227f7377a34d3e4aed1f2a930a82dcd6
SSDEEP 393216:6yO78DAHF2fXg6L/1onD7BjIbOLoQDsPyS6J0Q:QgAHF2ftJonfB8s9sPySw0Q
TLSH
T151D6331BD4BC2613CF5FB27B714BCF48755E62EE610ABA061ACC430639670E419BE1AD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\Local Settings\MuiCache	MiniSearchHost.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5072	MiniSearchHost.exe

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\Non confirmé 38711.zip"
1⤵
PID:4904

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2872

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:5072

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

SearchHoverUnifiedTileModelCache.dat

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
Size 22KB
SHA256 cb089358e86c16678b9613c88c8b6a4e19428076a62eafb40dbf5bf2c9ae24b6
MD5 5df333f616415460e29356291c45cc1f
SHA1 31cfc53d92cf787843f9dc12dfc92268473d2eb6
SHA512 16f97ea5cfb88c5e60d23e5d20521ee7f65bb6086bf963b4e3ba98775e9db2ae2d6e956562a5b0d9848f2f0734c0f7c31c643ee4ab4a1d3f4ff823b1fbe05d47
SSDEEP 384:YJWJoVca12krtuJvpmXmlJVjeQ8RJoNAghHUjUb8WZ5Pfm5k+GDa50qNNYAV6cBC:U+oVcWrMl8RJGAgJUjUb8k8k+GDa50q4
TLSH
T169A24D743AF51719F3F29F749AF1A95A643AB866AC00DB4D0122028D0977D92CDB0F3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download