Overview
overview
8Static
static
3🍊 I�...��.zip
windows10-2004-x64
1🍊 I�...��.zip
windows11-21h2-x64
1Setup.vbs
windows10-2004-x64
8Setup.vbs
windows11-21h2-x64
8_.padding
windows10-2004-x64
3_.padding
windows11-21h2-x64
3data/.runner.ps1
windows10-2004-x64
8data/.runner.ps1
windows11-21h2-x64
7data/file1_info.json
windows10-2004-x64
3data/file1_info.json
windows11-21h2-x64
3data/file1...7.part
windows10-2004-x64
3data/file1...7.part
windows11-21h2-x64
3data/file1...b.part
windows10-2004-x64
3data/file1...b.part
windows11-21h2-x64
3data/file1...m.part
windows10-2004-x64
3data/file1...m.part
windows11-21h2-x64
3data/file1...6q.ps1
windows10-2004-x64
3data/file1...6q.ps1
windows11-21h2-x64
3data/file1...M.part
windows10-2004-x64
3data/file1...M.part
windows11-21h2-x64
3data/file1...Q.part
windows10-2004-x64
3data/file1...Q.part
windows11-21h2-x64
3data/file1...I.part
windows10-2004-x64
3data/file1...I.part
windows11-21h2-x64
3data/file1...k.part
windows10-2004-x64
3data/file1...k.part
windows11-21h2-x64
3data/file1...H.part
windows10-2004-x64
3data/file1...H.part
windows11-21h2-x64
3data/file1...U.part
windows10-2004-x64
3data/file1...U.part
windows11-21h2-x64
3data/file1...6.part
windows10-2004-x64
3data/file1...6.part
windows11-21h2-x64
3Analysis
- max time kernel
149s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
15/05/2026, 18:29
Static task
static1
Behavioral task
behavioral1
Sample
🍊 Installer Setup.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
🍊 Installer Setup.zip
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
Setup.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Setup.vbs
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
_.padding
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
_.padding
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
data/.runner.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
data/.runner.ps1
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
data/file1_info.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
data/file1_info.json
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
data/file1_parts/1LduzGq03r97.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
data/file1_parts/1LduzGq03r97.part
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
data/file1_parts/2631TN4P00Vb.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
data/file1_parts/2631TN4P00Vb.part
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
data/file1_parts/59iquzHmdGGm.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
data/file1_parts/59iquzHmdGGm.part
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
data/file1_parts/7heLsL2qLN6q.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
data/file1_parts/7heLsL2qLN6q.ps1
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
data/file1_parts/991kwcWbPDUM.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
data/file1_parts/991kwcWbPDUM.part
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
data/file1_parts/ArH6UPLNucoQ.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
data/file1_parts/ArH6UPLNucoQ.part
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
data/file1_parts/FIWu9okMZ5NI.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
data/file1_parts/FIWu9okMZ5NI.part
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
data/file1_parts/FOpmSivjtzyk.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
data/file1_parts/FOpmSivjtzyk.part
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
data/file1_parts/FfBDyVEO44NH.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
data/file1_parts/FfBDyVEO44NH.part
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
data/file1_parts/GQ4GhH6kmhTU.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
data/file1_parts/GQ4GhH6kmhTU.part
Resource
win11-20260513-en
Behavioral task
behavioral31
Sample
data/file1_parts/IV84ZA9fhxa6.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
data/file1_parts/IV84ZA9fhxa6.part
Resource
win11-20260513-en
General
- Target data/file1_parts/FIWu9okMZ5NI.part
- Size 427KB
- Sample260515-w44a4sd13x
- SHA256 5a5d37700de3ab2c70c0ee607d15f434039b8879c42e96b26c8bb20c6993639e
- MD5 c84206f89c3171fd110c256b2269a2af
- SHA1 adfc1c52ddd8f6289460c1f03af47d4f7456464d
- SHA512 16fcb757601defddbfeddc7870d06f1e6d7212db662e676f49eeddc1e57a1b512017df4b7130a8f2823db664c64a7f885be015fefbe9341dd02698d988c9bf72
- SSDEEP 12288:stwEx1k6YDcQyizLr3pTiv1YYXsv6hDoRaMvP9h2SKqcIy:stwEDk6GZyiz/RifcyMaMvPz2SKJIy
- TLSH T1049423717E1A8E99E9A0FF493DB66E40332333013261E19C136F1FE636B541E766681E
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2724 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\data\file1_parts\FIWu9okMZ5NI.part1⤵
- Modifies registry class
PID:3232
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2724