c055e6077ca85590072d52ff04b084b690e8429520f8a9a2869670fb5877885e

Analysis

max time kernel
149s
max time network
164s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/05/2026, 03:04

Target
update/GTAIV.EFLC.FusionFix/IV/GTAIV.FusionFix.img
Size 7.0MB
Sample260528-dkrh4ags2y
SHA256 c055e6077ca85590072d52ff04b084b690e8429520f8a9a2869670fb5877885e
MD5 950ba22488f8c7de62ba8f19b8c1866d
SHA1 02cdf4e7a024d9b9f8ee8336c9a344a488da970a
SHA512 7a412f26d34936405d855bd8190e6cb54094b280db0f9d9716459dcaee43d8e1a59c4ef78111baf86aa3f28b610b3617f24995ecb48b8fd3e095d5b45c67bb73
SSDEEP 196608:TXsH8UkzPE9eSdk8iNX4wvLUa8HHWIA+nq0XF4Xozd:j+cSdi4xAW1E
TLSH
T15E76DD6AF45913EBCC9EB0733779130EEBAE1E343BB9B4594184110F7417EA2F86191A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\update\GTAIV.EFLC.FusionFix\IV\GTAIV.FusionFix.img
1⤵
- Modifies registry class
PID:2844

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact