cce4f49f8358d176c8c510d8f05d21ff5e4ee587f02558740236a3ccfeaa2923

Resubmissions

04/05/2026, 04:14

260504-etmryafy9q7

04/05/2026, 04:08

260504-eql18sfy5n8

Analysis

max time kernel
598s
max time network
535s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/05/2026, 04:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
assets/sidepanel-DHBbuRep.css
Size 37KB
Sample260504-eql18sfy5n
SHA256 cce4f49f8358d176c8c510d8f05d21ff5e4ee587f02558740236a3ccfeaa2923
MD5 3716901ef1d6b404e743b491ea0aede1
SHA1 7a7335fcf94e6e001d7661863779530f5df03db4
SHA512 cf879691a13a10ddbb3fe1fdc75eaff60eb0524b29c1847924266ac888f870c656443d87f88484969d46a38cc0cd48e7068b19c2a0cf1bb4c951f747c764dfe2
SSDEEP 384:kwBchgkAUu6StCA+6SC7M6AQ/+Sexrpy62LR0LXZU:Q9TStCn64rxrpypR0XZU
TLSH
T1EA034328A668503F7C57D1F9D6C8B96DF616F1C0CF3A9AE6EC851321A7D13F60C62608
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1456842261-3464001825-2855069093-1000_Classes\Local Settings	cmd.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 2528 wrote to memory of 1300	2528	cmd.exe	80

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\assets\sidepanel-DHBbuRep.css
1⤵
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:2528
- C:\Windows\system32\NOTEPAD.EXE
  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\assets\sidepanel-DHBbuRep.css
  2⤵
  PID:1300

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads