Overview
overview
8Static
static
3🍊 I�...��.zip
windows10-2004-x64
1🍊 I�...��.zip
windows11-21h2-x64
1Setup.vbs
windows10-2004-x64
8Setup.vbs
windows11-21h2-x64
8_.padding
windows10-2004-x64
3_.padding
windows11-21h2-x64
3data/.runner.ps1
windows10-2004-x64
8data/.runner.ps1
windows11-21h2-x64
7data/file1_info.json
windows10-2004-x64
3data/file1_info.json
windows11-21h2-x64
3data/file1...7.part
windows10-2004-x64
3data/file1...7.part
windows11-21h2-x64
3data/file1...b.part
windows10-2004-x64
3data/file1...b.part
windows11-21h2-x64
3data/file1...m.part
windows10-2004-x64
3data/file1...m.part
windows11-21h2-x64
3data/file1...6q.ps1
windows10-2004-x64
3data/file1...6q.ps1
windows11-21h2-x64
3data/file1...M.part
windows10-2004-x64
3data/file1...M.part
windows11-21h2-x64
3data/file1...Q.part
windows10-2004-x64
3data/file1...Q.part
windows11-21h2-x64
3data/file1...I.part
windows10-2004-x64
3data/file1...I.part
windows11-21h2-x64
3data/file1...k.part
windows10-2004-x64
3data/file1...k.part
windows11-21h2-x64
3data/file1...H.part
windows10-2004-x64
3data/file1...H.part
windows11-21h2-x64
3data/file1...U.part
windows10-2004-x64
3data/file1...U.part
windows11-21h2-x64
3data/file1...6.part
windows10-2004-x64
3data/file1...6.part
windows11-21h2-x64
3Analysis
- max time kernel
150s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
15/05/2026, 18:29
Static task
static1
Behavioral task
behavioral1
Sample
🍊 Installer Setup.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
🍊 Installer Setup.zip
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
Setup.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Setup.vbs
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
_.padding
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
_.padding
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
data/.runner.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
data/.runner.ps1
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
data/file1_info.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
data/file1_info.json
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
data/file1_parts/1LduzGq03r97.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
data/file1_parts/1LduzGq03r97.part
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
data/file1_parts/2631TN4P00Vb.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
data/file1_parts/2631TN4P00Vb.part
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
data/file1_parts/59iquzHmdGGm.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
data/file1_parts/59iquzHmdGGm.part
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
data/file1_parts/7heLsL2qLN6q.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
data/file1_parts/7heLsL2qLN6q.ps1
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
data/file1_parts/991kwcWbPDUM.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
data/file1_parts/991kwcWbPDUM.part
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
data/file1_parts/ArH6UPLNucoQ.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
data/file1_parts/ArH6UPLNucoQ.part
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
data/file1_parts/FIWu9okMZ5NI.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
data/file1_parts/FIWu9okMZ5NI.part
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
data/file1_parts/FOpmSivjtzyk.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
data/file1_parts/FOpmSivjtzyk.part
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
data/file1_parts/FfBDyVEO44NH.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
data/file1_parts/FfBDyVEO44NH.part
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
data/file1_parts/GQ4GhH6kmhTU.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
data/file1_parts/GQ4GhH6kmhTU.part
Resource
win11-20260513-en
Behavioral task
behavioral31
Sample
data/file1_parts/IV84ZA9fhxa6.part
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
data/file1_parts/IV84ZA9fhxa6.part
Resource
win11-20260513-en
General
- Target _.padding
- Size 69.9MB
- Sample260515-w44a4sd13x
- SHA256 2f6280ed034cfbaae1657892c0dbd4c264053de13098f3fdcaa54eb6efa1bdcc
- MD5 85ac8d0ac88e75b43787e50bdb30920a
- SHA1 b75526f8bbe1ce2447d66b4843ec6143d75c45ad
- SHA512 0222a61c3345cc5dd14c84b5277f4d8a93dd68651edaba28256bcde43d19c9b470a381143bcc69226b07113f758a4adf7852aae78109976f94f4f647272d5eb0
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2512 OpenWith.exe