15b0d97d6d284daceeb22ea5c478d1abf66460a94614ad658bea5e32f6937155

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
23/05/2026, 15:00

Target
Hearts of Iron IV [DODI Repack].torrent
Size 91KB
Sample260523-sdkvasdz3s
SHA256 15b0d97d6d284daceeb22ea5c478d1abf66460a94614ad658bea5e32f6937155
MD5 cfcfb00b954f9d5b4a0841f39788aaad
SHA1 c8bd7368f3e8be268ae8aafa7edded1d11abf1eb
SHA512 3704de508898dc834e5ad4e3621c1d49fca751eda49632ef22a491990505617e5e9c3489261aa9aea8eb7c9ef9976678a2201ef2a2daa72b284aec6629d012c3
SSDEEP 1536:Rxr78gg/VI3tyK4F6RSes325l8DX7yRf41D0aisouWgPA2RWXKXatD0rr8hWXXZh:RV7eK4s9s3UyXcfzwWgPApIaR0rriWXr
TLSH
T1BD9302E1359C924B37DAF53A72B8FD36E48CE06EC5DB0F978D2B5A1404309C6D65E026
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2824035265-2271499813-2042964211-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-2824035265-2271499813-2042964211-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
808	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Hearts of Iron IV [DODI Repack].torrent"
1⤵
- Modifies registry class
PID:444

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact