Overview
overview
4Static
static
1Sigmahacks.rar
windows10-2004-x64
1Sigmahacks.rar
windows11-21h2-x64
1Sigmahacks.sln
windows10-2004-x64
3Sigmahacks.sln
windows11-21h2-x64
3Sigmahacks/App.config
windows10-2004-x64
3Sigmahacks/App.config
windows11-21h2-x64
3Sigmahacks...API.js
windows10-2004-x64
3Sigmahacks...API.js
windows11-21h2-x64
3Sigmahacks...ner.cs
windows10-2004-x64
3Sigmahacks...ner.cs
windows11-21h2-x64
3Sigmahacks/Form1.cs
windows10-2004-x64
3Sigmahacks/Form1.cs
windows11-21h2-x64
3Sigmahacks/Form1.vbs
windows10-2004-x64
1Sigmahacks/Form1.vbs
windows11-21h2-x64
1Sigmahacks/Program.cs
windows10-2004-x64
3Sigmahacks/Program.cs
windows11-21h2-x64
3Sigmahacks...nfo.cs
windows10-2004-x64
3Sigmahacks...nfo.cs
windows11-21h2-x64
3Sigmahacks...er.vbs
windows10-2004-x64
1Sigmahacks...er.vbs
windows11-21h2-x64
1Sigmahacks...es.vbs
windows10-2004-x64
1Sigmahacks...es.vbs
windows11-21h2-x64
1Sigmahacks...ner.cs
windows10-2004-x64
3Sigmahacks...ner.cs
windows11-21h2-x64
3Sigmahacks...ttings
windows10-2004-x64
3Sigmahacks...ttings
windows11-21h2-x64
3Sigmahacks...ks.xml
windows10-2004-x64
3Sigmahacks...ks.xml
windows11-21h2-x64
4Analysis
- max time kernel
149s - max time network
149s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
18/04/2026, 04:00
Static task
static1
Behavioral task
behavioral1
Sample
Sigmahacks.rar
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
Sigmahacks.rar
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
Sigmahacks.sln
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
Sigmahacks.sln
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
Sigmahacks/App.config
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
Sigmahacks/App.config
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
Sigmahacks/CosmicAPI.js
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
Sigmahacks/CosmicAPI.js
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
Sigmahacks/Form1.Designer.cs
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
Sigmahacks/Form1.Designer.cs
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
Sigmahacks/Form1.cs
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
Sigmahacks/Form1.cs
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
Sigmahacks/Form1.vbs
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
Sigmahacks/Form1.vbs
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
Sigmahacks/Program.cs
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
Sigmahacks/Program.cs
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
Sigmahacks/Properties/AssemblyInfo.cs
Resource
win10v2004-20260130-en
Behavioral task
behavioral18
Sample
Sigmahacks/Properties/AssemblyInfo.cs
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
Sigmahacks/Properties/Resources.Designer.vbs
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
Sigmahacks/Properties/Resources.Designer.vbs
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
Sigmahacks/Properties/Resources.vbs
Resource
win10v2004-20260130-en
Behavioral task
behavioral22
Sample
Sigmahacks/Properties/Resources.vbs
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
Sigmahacks/Properties/Settings.Designer.cs
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
Sigmahacks/Properties/Settings.Designer.cs
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
Sigmahacks/Properties/Settings.settings
Resource
win10v2004-20260130-en
Behavioral task
behavioral26
Sample
Sigmahacks/Properties/Settings.settings
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
Sigmahacks/Sigmahacks.xml
Resource
win10v2004-20260130-en
General
- Target Sigmahacks/Properties/AssemblyInfo.cs
- Size 1KB
- Sample260418-ekth5ags2w
- SHA256 a991101493feb5540194c5fa7e02f1179ad45caa0b8d4741d400c847aa0e1635
- MD5 7171aced34d4c3b3f2fa216a916e1329
- SHA1 051658b981b8c7e5c4807fc042b05903b3e6e609
- SHA512 e8ab23087ab8b2c77086e370f76776ad838897ef1cb51d9fd1c87e32bef0e2f1e441ba7d123cb53d144057169283d0ff1415bd6b3c907d8f3692285caf79042c
- TLSH T178217C2D6341A37E8F510093BE6B75C583AD633892EB0C0935BCB953F20167843695BB
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2856 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Sigmahacks\Properties\AssemblyInfo.cs1⤵
- Modifies registry class
PID:2716
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2856