d3084afccf8963bb58aaf9dede02cc9b619eed037e7e5159da49cae2786e472e

Analysis

max time kernel
149s
max time network
97s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
23/05/2026, 02:51

Target
MD5/fitgirl-bins.md5
Size 363B
Sample260523-dcd8sses5w
SHA256 d3084afccf8963bb58aaf9dede02cc9b619eed037e7e5159da49cae2786e472e
MD5 f3eb41d91e12b6232137a1c9a1fe7014
SHA1 d6f0ef892b13b35842756562f8df8c570aaa51d1
SHA512 056eccfd6dfa6cc98fa8aaa54d571539f48f00708dae7a78378484e8a21365d2302fba223c502a9cf7cd09636ccc574093f20163f2f6249bffe083c90dcf7e30
TLSH
T102E0C07E1CA250B2D4F4CCE4C5D2D80083AA108D8883818928C031C7203782CCC55F71
MD5 SHA1 SHA512 TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3120	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\MD5\fitgirl-bins.md5
1⤵
- Modifies registry class
PID:2448

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact