604094433f3e526311df7c237e774f0cfc481a49cabab14a22002042a125a8a2

Analysis

max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/05/2026, 17:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
me/mioclient/mixin/m$$v6OpYJxV3vMbnhU2UeqSXrGxqgpybzwPIKtqWyEaTxn8tva8vvPPadGTe9UEIZrOIqSW0VnpkpNCrslmaeDN2yma9oZskTVoC.class
Size 569B
Sample260511-vs7cysay8l
SHA256 604094433f3e526311df7c237e774f0cfc481a49cabab14a22002042a125a8a2
MD5 56d78efef06817c43dd6059eef522168
SHA1 8016c535777a135f0ad9b8f46ec8df34c2c4c889
SHA512 c7774034db58316cd3bd4a47bbdef9cf0160f45d9815214ce3cebd302dd5209d94a576c49df5f9c38dc9bce2e37a0e768ab580fcee87f6e01e5bd5aa9f965812
TLSH
T1F5F04C1FE69095F2AC67BA5F4526C7856230DE70869A4391689A124B3E5118137B1059
MD5 SHA1 SHA512 TLSH

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4256	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\me\mioclient\mixin\m$$v6OpYJxV3vMbnhU2UeqSXrGxqgpybzwPIKtqWyEaTxn8tva8vvPPadGTe9UEIZrOIqSW0VnpkpNCrslmaeDN2yma9oZskTVoC.class
1⤵
- Modifies registry class
PID:2684

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4256

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2684-0-0x00000210B96F0000-0x00000210B979C000-memory.dmp

Download

memory/4256-1-0x0000023A37260000-0x0000023A3730C000-memory.dmp

Download

memory/4256-4-0x0000023A37260000-0x0000023A3730C000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads