7d8c45be3e84a56f48eb8b6007b4c88ccf2f5df36ffb197e7ed7e0c56ff7a43d

Resubmissions

05/06/2026, 08:04

260605-jyjy3adw7q10

05/06/2026, 07:50

260605-jplfjact6w3

Analysis

user interaction
yes
max time kernel
599s
max time network
392s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
05/06/2026, 07:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Order REF No_1152341#18_05_2026.vhdx
Size 14.0MB
Sample260605-jplfjact6w
SHA256 7d8c45be3e84a56f48eb8b6007b4c88ccf2f5df36ffb197e7ed7e0c56ff7a43d
MD5 9f8a8150395b123fd204f24950b5e2c9
SHA1 f827d54e1a80d27554cb295eda46fe57fac8ae92
SHA512 cc706191a5562b2a5fe3621493295f5c8b217b550939fca59dea18961c3f9552066bd48f669a71cbb7d0d79de3e45954473c482f5fb762655f6bc900584eface
SSDEEP 3072:R/pcGnh3vs/InbrTIHvPnHmC5irCuMo/+ncoZZihnhStZOtZmUiWt:BrZn7y/EGuH/cpiRi
TLSH
T1A1E6311371622645E305C3B59CBE3D69796BFD56938A13EC80B039CD84BE92125E2EF3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2409539145-3342400454-2096821238-1000_Classes\Local Settings	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Order REF No_1152341#18_05_2026.vhdx"
1⤵
- Modifies registry class
PID:4868

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1044

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads