a22d529bad4627a67b1c91519560cfea19cf1bb89d2c31dc3f6110905df89f6d

Analysis

max time kernel
149s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
09/05/2026, 23:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
temporario2.py
Size 4KB
Sample260509-3jp2baev3v
SHA256 a22d529bad4627a67b1c91519560cfea19cf1bb89d2c31dc3f6110905df89f6d
MD5 949660935daf4bd248e03870f5eec4a9
SHA1 c8e65454501c04d1ad5ce0c94d65233b81255bda
SHA512 715a398caf9f6b660296dd27f5c8f3d836c72c5553d2931457fe7952fe2890b00913c79382282991761f06130d2e45b36242cd77aa241e0d9f2503e4e07f652a
SSDEEP 96:EKaGMAb4FuodXu7lOHXA82oY73vb0yT0BzdfNNoFAENFSHGSW6ySbRQhN4+KiVPB:vb4FuoZwaX2rTRcZVNoF/qHY6ySb4a+r
TLSH
T1E09194605D4798169A33C6CD843BC458FD00B22315165E12BAFCC2157FB6C7AE2EC2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1383858298-2057492509-1726743289-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-1383858298-2057492509-1726743289-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2100	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\temporario2.py
1⤵
- Modifies registry class
PID:4484

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2100

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2100-0-0x00000146BAC70000-0x00000146BAD13000-memory.dmp

Download