Overview
overview
8Static
static
3🍊 I�...��.zip
windows10-2004-x64
1🍊 I�...��.zip
windows11-21h2-x64
1Setup.vbs
windows10-2004-x64
8Setup.vbs
windows11-21h2-x64
8_.padding
windows10-2004-x64
3_.padding
windows11-21h2-x64
3data/.runner.ps1
windows10-2004-x64
8data/.runner.ps1
windows11-21h2-x64
7data/file1_info.json
windows10-2004-x64
3data/file1_info.json
windows11-21h2-x64
3data/file1...7.part
windows10-2004-x64
3data/file1...7.part
windows11-21h2-x64
3data/file1...b.part
windows10-2004-x64
3data/file1...b.part
windows11-21h2-x64
3data/file1...m.part
windows10-2004-x64
3data/file1...m.part
windows11-21h2-x64
3data/file1...6q.ps1
windows10-2004-x64
3data/file1...6q.ps1
windows11-21h2-x64
3data/file1...M.part
windows10-2004-x64
3data/file1...M.part
windows11-21h2-x64
3data/file1...Q.part
windows10-2004-x64
3data/file1...Q.part
windows11-21h2-x64
3data/file1...I.part
windows10-2004-x64
3data/file1...I.part
windows11-21h2-x64
3data/file1...k.part
windows10-2004-x64
3data/file1...k.part
windows11-21h2-x64
3data/file1...H.part
windows10-2004-x64
3data/file1...H.part
windows11-21h2-x64
3data/file1...U.part
windows10-2004-x64
3data/file1...U.part
windows11-21h2-x64
3data/file1...6.part
windows10-2004-x64
3data/file1...6.part
windows11-21h2-x64
3Analysis
- max time kernel
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
15/05/2026, 18:29
Static task
static1
Behavioral task
behavioral1
Sample
🍊 Installer Setup.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
🍊 Installer Setup.zip
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
Setup.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Setup.vbs
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
_.padding
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
_.padding
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
data/.runner.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
data/.runner.ps1
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
data/file1_info.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
data/file1_info.json
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
data/file1_parts/1LduzGq03r97.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
data/file1_parts/1LduzGq03r97.part
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
data/file1_parts/2631TN4P00Vb.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
data/file1_parts/2631TN4P00Vb.part
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
data/file1_parts/59iquzHmdGGm.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
data/file1_parts/59iquzHmdGGm.part
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
data/file1_parts/7heLsL2qLN6q.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
data/file1_parts/7heLsL2qLN6q.ps1
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
data/file1_parts/991kwcWbPDUM.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
data/file1_parts/991kwcWbPDUM.part
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
data/file1_parts/ArH6UPLNucoQ.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
data/file1_parts/ArH6UPLNucoQ.part
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
data/file1_parts/FIWu9okMZ5NI.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
data/file1_parts/FIWu9okMZ5NI.part
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
data/file1_parts/FOpmSivjtzyk.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
data/file1_parts/FOpmSivjtzyk.part
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
data/file1_parts/FfBDyVEO44NH.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
data/file1_parts/FfBDyVEO44NH.part
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
data/file1_parts/GQ4GhH6kmhTU.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
data/file1_parts/GQ4GhH6kmhTU.part
Resource
win11-20260513-en
Behavioral task
behavioral31
Sample
data/file1_parts/IV84ZA9fhxa6.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
data/file1_parts/IV84ZA9fhxa6.part
Resource
win11-20260513-en
General
- Target data/file1_parts/59iquzHmdGGm.part
- Size 1016KB
- Sample260515-w44a4sd13x
- SHA256 611c42cdafea9d35f9bdd19f78d16b77df1acae4c075bf59b2fcdcc7ce44ad4f
- MD5 71625a0e3906a0bd159b61318d47d6ac
- SHA1 3cf80bef0bcdc694150eabe5d5dff4a5b6be31c1
- SHA512 aaff47a359e4784e982de3776a963a07f264418aff7e8b53aa68a2f0a3b148944b62b1e54b494d0e53927cef387b00b07d180ca69c0273c1c325fadf97afb0fe
- SSDEEP 24576:t4WC7auhZ8D1RUTAWp+RXtYkdtszONNmS2g4p242jLn5pMzv:WnP8RRJWp+RakHszYmS2iLn5mL
- TLSH T15A2533B46B937EBB9DE3D114AE24624CB3A238F2DEE1395720DC46234C997FA14B5530
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-125073035-2952146151-721812867-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-125073035-2952146151-721812867-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4364 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\data\file1_parts\59iquzHmdGGm.part1⤵
- Modifies registry class
PID:4584
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4364