9f455ce9d01d5f50ed3bf4f5665b13636a9e8d02a1933c61b03752f75f9ea733

Analysis

max time kernel
149s
max time network
152s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
29/05/2026, 14:11

Target
Premiere Pro 2024 - Copia/Learn Panel/payloads/pt_BR/dynamic/tutorials/10023e77-64ae-357b-be15-66fb46b11c1d_update.json
Size 12KB
Sample260529-rhlrqaev3p
SHA256 9f455ce9d01d5f50ed3bf4f5665b13636a9e8d02a1933c61b03752f75f9ea733
MD5 1cf3df40a81b62dba0da1cd3544d0942
SHA1 851ca1c03931cea4173d028f839efc1bd38ab36b
SHA512 46f29d5b6e02576be74aadc26d1b202a1f9da4e6fb76bb5e2d8c85854ef1386abd7d8219b0cf65ec27ec66a6c31b8433f39628137143e544e253b10085760bce
SSDEEP 192:v7WyMBylFyYstNFsR5/iMt6fipsZbAyCgzSk46cdy7O9e:gesG/i86fiLgzSk4fI
TLSH
T1FB424219C6740E73119692B625EE4491B230C0AF5FA9BD197B5CC05E0FDE82E29FA3CD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-125073035-2952146151-721812867-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-125073035-2952146151-721812867-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2008	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Premiere Pro 2024 - Copia\Learn Panel\payloads\pt_BR\dynamic\tutorials\10023e77-64ae-357b-be15-66fb46b11c1d_update.json"
1⤵
- Modifies registry class
PID:3464

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact