Overview
overview
8Static
static
3🍊 I�...��.zip
windows10-2004-x64
1🍊 I�...��.zip
windows11-21h2-x64
1Setup.vbs
windows10-2004-x64
8Setup.vbs
windows11-21h2-x64
8_.padding
windows10-2004-x64
3_.padding
windows11-21h2-x64
3data/.runner.ps1
windows10-2004-x64
8data/.runner.ps1
windows11-21h2-x64
7data/file1_info.json
windows10-2004-x64
3data/file1_info.json
windows11-21h2-x64
3data/file1...7.part
windows10-2004-x64
3data/file1...7.part
windows11-21h2-x64
3data/file1...b.part
windows10-2004-x64
3data/file1...b.part
windows11-21h2-x64
3data/file1...m.part
windows10-2004-x64
3data/file1...m.part
windows11-21h2-x64
3data/file1...6q.ps1
windows10-2004-x64
3data/file1...6q.ps1
windows11-21h2-x64
3data/file1...M.part
windows10-2004-x64
3data/file1...M.part
windows11-21h2-x64
3data/file1...Q.part
windows10-2004-x64
3data/file1...Q.part
windows11-21h2-x64
3data/file1...I.part
windows10-2004-x64
3data/file1...I.part
windows11-21h2-x64
3data/file1...k.part
windows10-2004-x64
3data/file1...k.part
windows11-21h2-x64
3data/file1...H.part
windows10-2004-x64
3data/file1...H.part
windows11-21h2-x64
3data/file1...U.part
windows10-2004-x64
3data/file1...U.part
windows11-21h2-x64
3data/file1...6.part
windows10-2004-x64
3data/file1...6.part
windows11-21h2-x64
3Analysis
- max time kernel
149s - max time network
153s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
15/05/2026, 18:29
Static task
static1
Behavioral task
behavioral1
Sample
🍊 Installer Setup.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
🍊 Installer Setup.zip
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
Setup.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Setup.vbs
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
_.padding
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
_.padding
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
data/.runner.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
data/.runner.ps1
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
data/file1_info.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
data/file1_info.json
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
data/file1_parts/1LduzGq03r97.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
data/file1_parts/1LduzGq03r97.part
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
data/file1_parts/2631TN4P00Vb.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
data/file1_parts/2631TN4P00Vb.part
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
data/file1_parts/59iquzHmdGGm.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
data/file1_parts/59iquzHmdGGm.part
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
data/file1_parts/7heLsL2qLN6q.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
data/file1_parts/7heLsL2qLN6q.ps1
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
data/file1_parts/991kwcWbPDUM.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
data/file1_parts/991kwcWbPDUM.part
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
data/file1_parts/ArH6UPLNucoQ.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
data/file1_parts/ArH6UPLNucoQ.part
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
data/file1_parts/FIWu9okMZ5NI.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
data/file1_parts/FIWu9okMZ5NI.part
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
data/file1_parts/FOpmSivjtzyk.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
data/file1_parts/FOpmSivjtzyk.part
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
data/file1_parts/FfBDyVEO44NH.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
data/file1_parts/FfBDyVEO44NH.part
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
data/file1_parts/GQ4GhH6kmhTU.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
data/file1_parts/GQ4GhH6kmhTU.part
Resource
win11-20260513-en
Behavioral task
behavioral31
Sample
data/file1_parts/IV84ZA9fhxa6.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
data/file1_parts/IV84ZA9fhxa6.part
Resource
win11-20260513-en
General
- Target data/file1_parts/IV84ZA9fhxa6.part
- Size 978KB
- Sample260515-w44a4sd13x
- SHA256 e97301a9d7f251f786c4b1165e4c8a8eeb97554daa552f8471dc823d2be258bb
- MD5 30518c01d963c284f39257273a8c8552
- SHA1 b7a72d12685db3a132c7ecccecb99434aed2aaf7
- SHA512 5564922ddb5f8d6cd8781e16efd54e3b5c02e0a1f80f2e6489b568a421ff9e0e2a68d289d251992ad8fc58e8b8825619b25268f6388be9f51cd57fcee2ade387
- SSDEEP 24576:Uet5XSuM/tSKhWTObtNIw4oBURkCL6WRxabb/+NS02Ca+FR2wW996T:Ue3AtoOBf4oeKAcSNSVkFR2z9a
- TLSH T15225335AC8B4E63E63A7441CEA3EA53FC28B6E038ACE9116C83D2518DCCF3545A5D4D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1768642833-2142038154-4041560723-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-1768642833-2142038154-4041560723-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1348 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\data\file1_parts\IV84ZA9fhxa6.part1⤵
- Modifies registry class
PID:5868
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1348