b8fd1a408bdac1f03e9bbcd2d05afea73d6673d158890089f8521aa34bd96f08

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
30/05/2026, 10:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
FollowZ5.exe
Size 1.4MB
Sample260530-mrrbcaat8x
SHA256 b8fd1a408bdac1f03e9bbcd2d05afea73d6673d158890089f8521aa34bd96f08
MD5 d8fc04dc91908eca27009e938be20605
SHA1 ea03110c753694e7312b43e3466e333794d80704
SHA512 c286a0dd714e4962af097492ee8265c520db4200e7113d302e87ce78c8766849e1761724027dfd5931bf9d8478ce61eb9962199948b9a095162a00ddac807d32
SSDEEP 24576:N5APK2ADMDh8uX3/DaiiHUYamm2x4UUxqKM6W+q7iXTNcLhoMs2M1:NwAQDWgbaigbamm2xCvMViMs2M1
TLSH
T1F865E536E69D3299D17B9078FD4A8C43E665B44A13203FEB02940E522F97EE05F3D791
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID	FollowZ5.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	FollowZ5.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID	FollowZ5.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	FollowZ5.exe

C:\Users\Admin\AppData\Local\Temp\FollowZ5.exe
"C:\Users\Admin\AppData\Local\Temp\FollowZ5.exe"
1⤵
- Checks SCSI registry key(s)
PID:4376

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads