Overview
overview
4Static
static
1Sigmahacks.rar
windows10-2004-x64
1Sigmahacks.rar
windows11-21h2-x64
1Sigmahacks.sln
windows10-2004-x64
3Sigmahacks.sln
windows11-21h2-x64
3Sigmahacks/App.config
windows10-2004-x64
3Sigmahacks/App.config
windows11-21h2-x64
3Sigmahacks...API.js
windows10-2004-x64
3Sigmahacks...API.js
windows11-21h2-x64
3Sigmahacks...ner.cs
windows10-2004-x64
3Sigmahacks...ner.cs
windows11-21h2-x64
3Sigmahacks/Form1.cs
windows10-2004-x64
3Sigmahacks/Form1.cs
windows11-21h2-x64
3Sigmahacks/Form1.vbs
windows10-2004-x64
1Sigmahacks/Form1.vbs
windows11-21h2-x64
1Sigmahacks/Program.cs
windows10-2004-x64
3Sigmahacks/Program.cs
windows11-21h2-x64
3Sigmahacks...nfo.cs
windows10-2004-x64
3Sigmahacks...nfo.cs
windows11-21h2-x64
3Sigmahacks...er.vbs
windows10-2004-x64
1Sigmahacks...er.vbs
windows11-21h2-x64
1Sigmahacks...es.vbs
windows10-2004-x64
1Sigmahacks...es.vbs
windows11-21h2-x64
1Sigmahacks...ner.cs
windows10-2004-x64
3Sigmahacks...ner.cs
windows11-21h2-x64
3Sigmahacks...ttings
windows10-2004-x64
3Sigmahacks...ttings
windows11-21h2-x64
3Sigmahacks...ks.xml
windows10-2004-x64
3Sigmahacks...ks.xml
windows11-21h2-x64
4Analysis
- max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
18/04/2026, 04:00
Static task
static1
Behavioral task
behavioral1
Sample
Sigmahacks.rar
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
Sigmahacks.rar
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
Sigmahacks.sln
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
Sigmahacks.sln
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
Sigmahacks/App.config
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
Sigmahacks/App.config
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
Sigmahacks/CosmicAPI.js
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
Sigmahacks/CosmicAPI.js
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
Sigmahacks/Form1.Designer.cs
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
Sigmahacks/Form1.Designer.cs
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
Sigmahacks/Form1.cs
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
Sigmahacks/Form1.cs
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
Sigmahacks/Form1.vbs
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
Sigmahacks/Form1.vbs
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
Sigmahacks/Program.cs
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
Sigmahacks/Program.cs
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
Sigmahacks/Properties/AssemblyInfo.cs
Resource
win10v2004-20260130-en
Behavioral task
behavioral18
Sample
Sigmahacks/Properties/AssemblyInfo.cs
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
Sigmahacks/Properties/Resources.Designer.vbs
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
Sigmahacks/Properties/Resources.Designer.vbs
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
Sigmahacks/Properties/Resources.vbs
Resource
win10v2004-20260130-en
Behavioral task
behavioral22
Sample
Sigmahacks/Properties/Resources.vbs
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
Sigmahacks/Properties/Settings.Designer.cs
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
Sigmahacks/Properties/Settings.Designer.cs
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
Sigmahacks/Properties/Settings.settings
Resource
win10v2004-20260130-en
Behavioral task
behavioral26
Sample
Sigmahacks/Properties/Settings.settings
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
Sigmahacks/Sigmahacks.xml
Resource
win10v2004-20260130-en
General
- Target Sigmahacks/Properties/Settings.settings
- Size 249B
- Sample260418-ekth5ags2w
- SHA256 f6a4290723520caddd934b8800319c7ca6cc7eeab647059ec89b7a13b1513265
- MD5 8c0f00d7d9b0046695a0255f1b11b061
- SHA1 5e1d04de66ffcc5dfd813530ab6992e6daaae417
- SHA512 a95c07dc3241b7c9f37b7f0a5c143c9c133c3bcbfa16e4a689cf47f45b3e9d0ccf5c965143a6848237e7a9fa8deecb89837dc12b12fabd8231fe94f3ccba26aa
- TLSH T1A4D0A78994C8880693313970F468E13C91106757046A95647164784F15071D612D35E7
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4696 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Sigmahacks\Properties\Settings.settings1⤵
- Modifies registry class
PID:3736
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4696