Overview
overview
10Static
static
3Dimmi.zip
windows10-2004-x64
1Dimmi.zip
windows11-21h2-x64
1Dimmi/Core...fig.js
windows10-2004-x64
3Dimmi/Core...fig.js
windows11-21h2-x64
3Dimmi/entrypoint.js
windows10-2004-x64
3Dimmi/entrypoint.js
windows11-21h2-x64
3Dimmi/x64/...mi.exe
windows10-2004-x64
10Dimmi/x64/...mi.exe
windows11-21h2-x64
8Dimmi/x64/...mi.pdb
windows10-2004-x64
3Dimmi/x64/...mi.pdb
windows11-21h2-x64
3Dimmi/x64/...an.bat
windows10-2004-x64
1Dimmi/x64/...an.bat
windows11-21h2-x64
1Dimmi/x64/...n1.bat
windows10-2004-x64
5Dimmi/x64/...n1.bat
windows11-21h2-x64
5Dimmi/x64/...n2.bat
windows10-2004-x64
7Dimmi/x64/...n2.bat
windows11-21h2-x64
7Dimmi/x64/...n3.bat
windows10-2004-x64
1Dimmi/x64/...n3.bat
windows11-21h2-x64
1Dimmi/x64/...n4.bat
windows10-2004-x64
7Dimmi/x64/...n4.bat
windows11-21h2-x64
7Dimmi/x64/...n5.bat
windows10-2004-x64
1Dimmi/x64/...n5.bat
windows11-21h2-x64
1Dimmi/x64/...V4.exe
windows10-2004-x64
10Dimmi/x64/...V4.exe
windows11-21h2-x64
10Dimmi/x64/...er.bat
windows10-2004-x64
1Dimmi/x64/...er.bat
windows11-21h2-x64
1Dimmi/x64/...recipe
windows10-2004-x64
3Dimmi/x64/...recipe
windows11-21h2-x64
3Dimmi/x64/...dstate
windows10-2004-x64
3Dimmi/x64/...dstate
windows11-21h2-x64
3Dimmi/x64/...recipe
windows10-2004-x64
3Dimmi/x64/...recipe
windows11-21h2-x64
3Analysis
- max time kernel
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
04/06/2026, 15:37
Static task
static1
Behavioral task
behavioral1
Sample
Dimmi.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Dimmi.zip
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
Dimmi/Core/cheat/Config/config.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Dimmi/Core/cheat/Config/config.js
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
Dimmi/entrypoint.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Dimmi/entrypoint.js
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
Dimmi/x64/Release/Dimmi.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Dimmi/x64/Release/Dimmi.exe
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
Dimmi/x64/Release/Dimmi.pdb
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Dimmi/x64/Release/Dimmi.pdb
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
Dimmi/x64/Release/Spoof/Cleaners/clean.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Dimmi/x64/Release/Spoof/Cleaners/clean.bat
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
Dimmi/x64/Release/Spoof/Cleaners/clean1.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Dimmi/x64/Release/Spoof/Cleaners/clean1.bat
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
Dimmi/x64/Release/Spoof/Cleaners/clean2.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Dimmi/x64/Release/Spoof/Cleaners/clean2.bat
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
Dimmi/x64/Release/Spoof/Cleaners/clean3.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Dimmi/x64/Release/Spoof/Cleaners/clean3.bat
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
Dimmi/x64/Release/Spoof/Cleaners/clean4.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Dimmi/x64/Release/Spoof/Cleaners/clean4.bat
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
Dimmi/x64/Release/Spoof/Cleaners/clean5.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Dimmi/x64/Release/Spoof/Cleaners/clean5.bat
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
Dimmi/x64/Release/Spoof/Xeno Free Temp V4.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
Dimmi/x64/Release/Spoof/Xeno Free Temp V4.exe
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
Dimmi/x64/Release/Spoof/serials checker.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Dimmi/x64/Release/Spoof/serials checker.bat
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
Dimmi/x64/Release/obj/AbdiWorking.exe.recipe
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Dimmi/x64/Release/obj/AbdiWorking.exe.recipe
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
Dimmi/x64/Release/obj/AbdiWorking.tlog/AbdiWorking.lastbuildstate
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
Dimmi/x64/Release/obj/AbdiWorking.tlog/AbdiWorking.lastbuildstate
Resource
win11-20260513-en
Behavioral task
behavioral31
Sample
Dimmi/x64/Release/obj/Dimmi.exe.recipe
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
Dimmi/x64/Release/obj/Dimmi.exe.recipe
Resource
win11-20260513-en
General
- Target Dimmi/x64/Release/obj/Dimmi.exe.recipe
- Size 313B
- Sample260604-s2vdmsaw2j
- SHA256 dd6a3ad4e16d48f9c38c6be2c3512fa8873699b9ed3233f940877880edfea2e1
- MD5 a2cfb82eb0776d55a094d7ce21a3a59b
- SHA1 583861e0285da6cab7b5dc1b7085b714078cb0fb
- SHA512 953f35b3097f74b57b70b87c1ae2b6e1efd0cafb84794239576ef464bd4b1162a25231c0d66ce4204a444d4bcc18edb831a9ec74e8282dec37ed05c5cc9c663e
- TLSH T186E08CA65884E046A7B05155D26D8F6AF70ABE874A304CA13490CEAB0E9348440034A7
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2880 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Dimmi\x64\Release\obj\Dimmi.exe.recipe1⤵
- Modifies registry class
PID:3252
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2880