501661ec38a6a608b4c264caada30382f23c6cd84b34457ea331d3363ce6d937

Analysis

max time kernel
149s
max time network
157s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
11/05/2026, 17:16

Target
me/mioclient/mixin/m$$q789jLrnl9JsUidhwlmqhDlKFRkhnoFaeVgNks4rVE5gOll3oLvee7khVGrNxrYTg5jESj9WlmGUQlCmmaJH3UBtPje0PctJ1.class
Size 1008B
Sample260511-vs7cysay8l
SHA256 501661ec38a6a608b4c264caada30382f23c6cd84b34457ea331d3363ce6d937
MD5 b3d664b8bd3a6babb98e8b32a793f60d
SHA1 a0c7ae2741c68742ceeb5b51312f37c6f7816afa
SHA512 0642d62f634c4564e496c65aa8477ea3744d5f46c350db594843d4a61c142d2d641a81fe32c2cc9cb154cbc8fd166f66611f80deb4cb8b395f1f6184fe82e8a7
TLSH
T15D1186B6306CB765C64E362E69F5B2C83296B7D88287130B45EE02F77CC0C6428B94D6
MD5 SHA1 SHA512 TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-650218026-1419908266-2856590055-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4616	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\me\mioclient\mixin\m$$q789jLrnl9JsUidhwlmqhDlKFRkhnoFaeVgNks4rVE5gOll3oLvee7khVGrNxrYTg5jESj9WlmGUQlCmmaJH3UBtPje0PctJ1.class
1⤵
- Modifies registry class
PID:2980

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact