Analysis
- max time kernel
16s - max time network
14s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
04/06/2026, 18:08
Behavioral task
behavioral1
Sample
TruongVuMacro.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
TruongVuMacro.exe
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
TruongVuMacro.exe
Resource
win11-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
TruongVuMacro.pyc
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
TruongVuMacro.pyc
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
TruongVuMacro.pyc
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target TruongVuMacro.pyc
- Size 91KB
- Sample260604-wras2abx5t
- SHA256 8c84cd017e981322341398583d9f0f1a5c211f3bb6f82e947dd6d7fba77622b9
- MD5 ae7a451969b79d479a93994741cd4d2d
- SHA1 59b473edec2440b2e3556f7b8d618ce3deeeaf52
- SHA512 f6e4afb3b995e32735da4e768f08b9da7f037edd8d7117d888fafaca1493db9ac10ed74582566dace5f5a8554f10793eedb33a32b3d59842db885324f38561e9
- SSDEEP 768:A/oZxdznqIwbw06j75WeAXq3hmK8m2nuTlkZNqi4AVF+sZBKK2sOSymPA:rxVwbwP5WeAOm4yRFr2Ss
- TLSH T16393E5B4B874BA1BF8CDB53939DB9640B7215145B208EA0BE13808BD7CD5776CE5A30E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5324 OpenWith.exe