Analysis
- max time kernel
149s - max time network
159s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/06/2026, 11:48
Static task
static1
Behavioral task
behavioral1
Sample
tmpnz5ppu5m.iso
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpnz5ppu5m.iso
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpnz5ppu5m.iso
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target tmpnz5ppu5m.iso
- Size 3.5MB
- Sample260602-nyl6mscs3x
- SHA256 61f7bb9e8e44e510eff6d0169d8e4e7729e902e4de8f980fc8ddd80721eb8038
- MD5 b7da5d777b9469c14cdbb5810dba0565
- SHA1 451164bd90918af88a4c01d1d09cf1a7ef62e73f
- SHA512 d10f2928f2c2219299ccf9c7415a7690f68d0321f57348e30cc07f75df5620fe4a227d1c47d4e5affb3741b0a568ed45b764fafa5fe47b2eeae23fa2c57ac7b4
- SSDEEP 49152:X1DhIOSfcPFIRfkkB45cT2Y/XAxeOsZmlwUH7vaQUIV59DMRxRnCLTu:
- TLSH T117066B17C66E5B4ED8097B71106A5D9AFE89CAFCEF726BC4E0CF90B110EA1100B855B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings cmd.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeManageVolumePrivilege 3924 cmd.exe Token: SeManageVolumePrivilege 3924 cmd.exe