b16eea517a3b0b511894accf22b021e9d35ece1740f8439e1fc8a1058133c64e

Analysis

max time kernel
149s
max time network
158s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
09/05/2026, 03:07

Target
Celemony - Melodyne 5 Studio v5.4.2.006/Melodyne.5.4.2.006 MORiA.pkg
Size 95.9MB
Sample260509-dmr8eah16x
SHA256 b16eea517a3b0b511894accf22b021e9d35ece1740f8439e1fc8a1058133c64e
MD5 7dea33086d98679a70d5980b1643f40f
SHA1 78118a66760564dde4527f1838dfb138b01f7ae8
SHA512 1c32f1af7f60973510d5898ec628a521c91126b980f47cb560da3b0761c993ffd2d6d58354ff6bddf9761b9ce58e96ae25ad198eda5b474cccfab07157b0b1d7
SSDEEP 1572864:omp0e9+LuNLlTtUCinhb1/mgKtE1Jp7ojRwP9HY5NcxS94YwOBfgvTTCL+LZ0OUf:lpqCdECihRmftgIjRWHY5Ncx440Ngv/a
TLSH
T1122833A592B0CEA6DE01313DA571722AB9F45AD8B98E9F0ED0E5C9C5C14430B8B5FC4F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5020	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Celemony - Melodyne 5 Studio v5.4.2.006\Melodyne.5.4.2.006 MORiA.pkg"
1⤵
- Modifies registry class
PID:708

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact