b7f7247c050356a269720d84d7f9ea10c02cce45b1c453bc8225410a5b102a66

Resubmissions

21/04/2026, 18:27

260421-w38jfaev3v3

21/04/2026, 18:25

260421-w2w41sav3n3

Analysis

max time kernel
898s
max time network
509s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
21/04/2026, 18:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
[email protected]
Size 16KB
Sample260421-w38jfaev3v
SHA256 b7f7247c050356a269720d84d7f9ea10c02cce45b1c453bc8225410a5b102a66
MD5 2ee9809d273a50411f68486bbb8eeb91
SHA1 29be608e19623989a9e04649a1eeae8837300817
SHA512 c2d94cb8f8a15bcf51d56f6a51b6daaa8091d30207e28ab887aef1a55b67a32294845b67944953ad20efbac2c04a434c4b8d83ee9285d07afb91c674f508159d
SSDEEP 192:h/lllCXQyclXzALayObCbr2yvcHEInB/wfwf2/ukVb1zZGWa8LYMxd0Z8c:3bzlX0dObDccHRB/0W61Fd+
TLSH
T13E72B9129400143BD68744B72C57A0527B92E953562A1875FCFC82B4AF8A73DC7F1BF6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings	cmd.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3488	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\[email protected]
1⤵
- Modifies registry class
PID:2388

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3488

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2388-0-0x0000016FFBB20000-0x0000016FFBB50000-memory.dmp

Download

memory/3488-1-0x0000022BA8770000-0x0000022BA87A0000-memory.dmp