Overview
overview
8Static
static
3🍊 I�...��.zip
windows10-2004-x64
1🍊 I�...��.zip
windows11-21h2-x64
1Setup.vbs
windows10-2004-x64
8Setup.vbs
windows11-21h2-x64
8_.padding
windows10-2004-x64
3_.padding
windows11-21h2-x64
3data/.runner.ps1
windows10-2004-x64
8data/.runner.ps1
windows11-21h2-x64
7data/file1_info.json
windows10-2004-x64
3data/file1_info.json
windows11-21h2-x64
3data/file1...7.part
windows10-2004-x64
3data/file1...7.part
windows11-21h2-x64
3data/file1...b.part
windows10-2004-x64
3data/file1...b.part
windows11-21h2-x64
3data/file1...m.part
windows10-2004-x64
3data/file1...m.part
windows11-21h2-x64
3data/file1...6q.ps1
windows10-2004-x64
3data/file1...6q.ps1
windows11-21h2-x64
3data/file1...M.part
windows10-2004-x64
3data/file1...M.part
windows11-21h2-x64
3data/file1...Q.part
windows10-2004-x64
3data/file1...Q.part
windows11-21h2-x64
3data/file1...I.part
windows10-2004-x64
3data/file1...I.part
windows11-21h2-x64
3data/file1...k.part
windows10-2004-x64
3data/file1...k.part
windows11-21h2-x64
3data/file1...H.part
windows10-2004-x64
3data/file1...H.part
windows11-21h2-x64
3data/file1...U.part
windows10-2004-x64
3data/file1...U.part
windows11-21h2-x64
3data/file1...6.part
windows10-2004-x64
3data/file1...6.part
windows11-21h2-x64
3Analysis
- max time kernel
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
15/05/2026, 18:29
Static task
static1
Behavioral task
behavioral1
Sample
🍊 Installer Setup.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
🍊 Installer Setup.zip
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
Setup.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Setup.vbs
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
_.padding
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
_.padding
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
data/.runner.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
data/.runner.ps1
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
data/file1_info.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
data/file1_info.json
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
data/file1_parts/1LduzGq03r97.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
data/file1_parts/1LduzGq03r97.part
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
data/file1_parts/2631TN4P00Vb.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
data/file1_parts/2631TN4P00Vb.part
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
data/file1_parts/59iquzHmdGGm.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
data/file1_parts/59iquzHmdGGm.part
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
data/file1_parts/7heLsL2qLN6q.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
data/file1_parts/7heLsL2qLN6q.ps1
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
data/file1_parts/991kwcWbPDUM.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
data/file1_parts/991kwcWbPDUM.part
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
data/file1_parts/ArH6UPLNucoQ.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
data/file1_parts/ArH6UPLNucoQ.part
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
data/file1_parts/FIWu9okMZ5NI.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
data/file1_parts/FIWu9okMZ5NI.part
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
data/file1_parts/FOpmSivjtzyk.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
data/file1_parts/FOpmSivjtzyk.part
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
data/file1_parts/FfBDyVEO44NH.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
data/file1_parts/FfBDyVEO44NH.part
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
data/file1_parts/GQ4GhH6kmhTU.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
data/file1_parts/GQ4GhH6kmhTU.part
Resource
win11-20260513-en
Behavioral task
behavioral31
Sample
data/file1_parts/IV84ZA9fhxa6.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
data/file1_parts/IV84ZA9fhxa6.part
Resource
win11-20260513-en
General
- Target data/file1_parts/991kwcWbPDUM.part
- Size 251KB
- Sample260515-w44a4sd13x
- SHA256 21d1fa5ded5676de53d620e09193fd913ce27433fc5c2d65dd9fa7fc0f97b71b
- MD5 b506ce82343f3f48e8114c7802908083
- SHA1 50e5149c0451073896917009ed4956cfb15c9c4d
- SHA512 8e1f13533cc2e56d42e8d05ade43ba643c5973a1b05cbbe92ac8552fa0407d965f1b738315f33fd3f52689f2d3232f4ec81061a10c1e2453879738cb03393a2a
- SSDEEP 6144:8+EDa0ngX8SLZkqaOZVR3CvSxaaW3YuMnxg6ho0Q2:8+JigMSLZkqaObR3Cap2K9hbp
- TLSH T1F444232602E46261FC672D5E24E506DC2062260117BFAEA4DDBDCB3EEF56712F91843B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 672 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\data\file1_parts\991kwcWbPDUM.part1⤵
- Modifies registry class
PID:1228
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:672