Overview
overview
10Static
static
3Dimmi.zip
windows10-2004-x64
1Dimmi.zip
windows11-21h2-x64
1Dimmi/Core...fig.js
windows10-2004-x64
3Dimmi/Core...fig.js
windows11-21h2-x64
3Dimmi/entrypoint.js
windows10-2004-x64
3Dimmi/entrypoint.js
windows11-21h2-x64
3Dimmi/x64/...mi.exe
windows10-2004-x64
10Dimmi/x64/...mi.exe
windows11-21h2-x64
8Dimmi/x64/...mi.pdb
windows10-2004-x64
3Dimmi/x64/...mi.pdb
windows11-21h2-x64
3Dimmi/x64/...an.bat
windows10-2004-x64
1Dimmi/x64/...an.bat
windows11-21h2-x64
1Dimmi/x64/...n1.bat
windows10-2004-x64
5Dimmi/x64/...n1.bat
windows11-21h2-x64
5Dimmi/x64/...n2.bat
windows10-2004-x64
7Dimmi/x64/...n2.bat
windows11-21h2-x64
7Dimmi/x64/...n3.bat
windows10-2004-x64
1Dimmi/x64/...n3.bat
windows11-21h2-x64
1Dimmi/x64/...n4.bat
windows10-2004-x64
7Dimmi/x64/...n4.bat
windows11-21h2-x64
7Dimmi/x64/...n5.bat
windows10-2004-x64
1Dimmi/x64/...n5.bat
windows11-21h2-x64
1Dimmi/x64/...V4.exe
windows10-2004-x64
10Dimmi/x64/...V4.exe
windows11-21h2-x64
10Dimmi/x64/...er.bat
windows10-2004-x64
1Dimmi/x64/...er.bat
windows11-21h2-x64
1Dimmi/x64/...recipe
windows10-2004-x64
3Dimmi/x64/...recipe
windows11-21h2-x64
3Dimmi/x64/...dstate
windows10-2004-x64
3Dimmi/x64/...dstate
windows11-21h2-x64
3Dimmi/x64/...recipe
windows10-2004-x64
3Dimmi/x64/...recipe
windows11-21h2-x64
3Analysis
- max time kernel
149s - max time network
111s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
04/06/2026, 15:37
Static task
static1
Behavioral task
behavioral1
Sample
Dimmi.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Dimmi.zip
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
Dimmi/Core/cheat/Config/config.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Dimmi/Core/cheat/Config/config.js
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
Dimmi/entrypoint.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Dimmi/entrypoint.js
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
Dimmi/x64/Release/Dimmi.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Dimmi/x64/Release/Dimmi.exe
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
Dimmi/x64/Release/Dimmi.pdb
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Dimmi/x64/Release/Dimmi.pdb
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
Dimmi/x64/Release/Spoof/Cleaners/clean.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Dimmi/x64/Release/Spoof/Cleaners/clean.bat
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
Dimmi/x64/Release/Spoof/Cleaners/clean1.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Dimmi/x64/Release/Spoof/Cleaners/clean1.bat
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
Dimmi/x64/Release/Spoof/Cleaners/clean2.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Dimmi/x64/Release/Spoof/Cleaners/clean2.bat
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
Dimmi/x64/Release/Spoof/Cleaners/clean3.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Dimmi/x64/Release/Spoof/Cleaners/clean3.bat
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
Dimmi/x64/Release/Spoof/Cleaners/clean4.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Dimmi/x64/Release/Spoof/Cleaners/clean4.bat
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
Dimmi/x64/Release/Spoof/Cleaners/clean5.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Dimmi/x64/Release/Spoof/Cleaners/clean5.bat
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
Dimmi/x64/Release/Spoof/Xeno Free Temp V4.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
Dimmi/x64/Release/Spoof/Xeno Free Temp V4.exe
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
Dimmi/x64/Release/Spoof/serials checker.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Dimmi/x64/Release/Spoof/serials checker.bat
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
Dimmi/x64/Release/obj/AbdiWorking.exe.recipe
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Dimmi/x64/Release/obj/AbdiWorking.exe.recipe
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
Dimmi/x64/Release/obj/AbdiWorking.tlog/AbdiWorking.lastbuildstate
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
Dimmi/x64/Release/obj/AbdiWorking.tlog/AbdiWorking.lastbuildstate
Resource
win11-20260513-en
Behavioral task
behavioral31
Sample
Dimmi/x64/Release/obj/Dimmi.exe.recipe
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
Dimmi/x64/Release/obj/Dimmi.exe.recipe
Resource
win11-20260513-en
General
- Target Dimmi/x64/Release/obj/AbdiWorking.exe.recipe
- Size 326B
- Sample260604-s2vdmsaw2j
- SHA256 d24e8f4c0375ed73a3c16d8b2b711fa88d8867fd094be5045be88f830e7d8d4b
- MD5 0243e811e8f7929946d3dce0b3577ef9
- SHA1 dea6f46ad895b5924d49495e5b5b04980e4d7b2a
- SHA512 66a0a359ebb3b24f7ecd5a5c096623d87935453e069e9f5b592c90eed22ee5d400c96f848c28b7b0493b2995ab997e08d3b64da1000b2baf934f4941d1d6fb81
- TLSH T1C4E08CAA5880F45667B09111D67EAF69FB9EBAD34A240CA13484CDAB0E9B44440434B7
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3464 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Dimmi\x64\Release\obj\AbdiWorking.exe.recipe1⤵
- Modifies registry class
PID:1816
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3464