Analysis
- max time kernel
150s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
15/05/2026, 01:52
Behavioral task
behavioral1
Sample
Florence_app.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Florence_app.exe
Resource
win11-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
Florence_app.pyc
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
Florence_app.pyc
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target Florence_app.pyc
- Size 24KB
- Sample260515-calpesf18k
- SHA256 505d2d83e7f9dbabfb085d6e3911857d5279ea4a1cf7d51ed0d3d53dec7bf5de
- MD5 8abe27462e6c0b4e3d2080842bb86fd2
- SHA1 e9df7a9efa9d2df5328e7512b0bbfa5946a2945a
- SHA512 d5c3a97c32aa1b218d02ec5944a47653610763bfc2092a440adbca2178a51f752d47d507f01f0a7795fb94bc0d0c44ffd32444b7016dd0ccda44e3699566fb95
- SSDEEP 384:XrskWIjJk7DvTTdoVnN0zSJfAPLbteCgCa6b6khU:VWId8oVN04oPt6M67
- TLSH T1B3B21ABCC9103657F898F07471CF99897726E2C96106E75BE430D8BC3CA9B279926B4C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2880 OpenWith.exe