45251b3fee449f2391e10aa80c4d5ccb867e281aeecd4d20b84dab43d8aedfbf

Analysis

max time kernel
149s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/05/2026, 20:26

Target
inferno/inferno/Source/Roblox/Classes/Materials.hpp
Size 1KB
Sample260525-y79cmsat4x
SHA256 45251b3fee449f2391e10aa80c4d5ccb867e281aeecd4d20b84dab43d8aedfbf
MD5 b5a2dd68213390371e4ff7c09ae5c50a
SHA1 de2e617ea62dc4eb9001882f99b3a8728394231f
SHA512 da973168a54a7023c1db987df05b1fa0f3c372711ee769a10aa9522b5bcc035ba22cc0e3f63d3461c95e4ccc86d296cc87fa559a022e2f80bbf0b91e839e8f6e
TLSH
T1DA213A550C0966287E7C6715B9704559EC303B734318829BB7BE16100F32A5B64D59B3
MD5 SHA1 SHA512 TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings	cmd.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
836	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\inferno\inferno\Source\Roblox\Classes\Materials.hpp
1⤵
- Modifies registry class
PID:5272

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact