aa6d81763ad4e42f5ab72dbb8cac273b0b249989848762f626503fc9ee152fb2

Analysis

max time kernel
149s
max time network
94s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
21/04/2026, 03:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Mewgenics/steam_emu.ini
Size 1KB
Sample260421-d37yssa151
SHA256 aa6d81763ad4e42f5ab72dbb8cac273b0b249989848762f626503fc9ee152fb2
MD5 6d9cc05ba7d3601f02b43ab08aa36086
SHA1 a53b020ee9dc1f2579a1a1a854012f472061ef26
SHA512 0c208b7f520a497b060f3b272ad36e8ebe2b8ec91391a0eb0f86417960c9fe0c770b446666657cc23e5ca10edf5d8be448164d43ffba83eb3ceb7f828d85e9a2
TLSH
T1BB41A8181695B73B4E0BB2B5575FF22E679AA0C6F70B8CA8723DCBC8B340211110159F
MD5 SHA1 SHA512 TLSH

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-2122505878-652277452-2375749442-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2184	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Mewgenics\steam_emu.ini
1⤵
- Modifies registry class
PID:3404

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2184

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2184-0-0x00000190626A0000-0x0000019062E4E000-memory.dmp

Download