Analysis
- user interaction
yes - max time kernel
898s - max time network
488s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
06/06/2026, 10:38
Behavioral task
behavioral1
Sample
pickles.exe
Resource
win11-20260513-en
34 signatures
900 seconds
Behavioral task
behavioral2
Sample
bsod_looper.pyc
Resource
win11-20260513-en
3 signatures
900 seconds
General
- Target bsod_looper.pyc
- Size 13KB
- Sample260606-mpqa9sdv3m
- SHA256 f9a811503eae9382745f6b56342bd205ad14ef53de9b0860a3a494084099eaed
- MD5 57dbf8da7502feb37108c6a8aed3799c
- SHA1 48d581c1d343702e09f35ac420a48f29af8924df
- SHA512 3397aebc5b4594e62ab195a5c87387f1b715e57585cfe63857fcbf9a9b15046612cad2931228d4f421e5dca010fac3ac619483c4efb4e291b5a0292598f3fc0c
- SSDEEP 192:4nghmqLf4+eQ6DQS4nNAB8hZVoilCj30F6MWTThwEG/m:Eg/Lf4+eQ6BuNhfoiakF4yH/m
- TLSH T1865273923B83C976FC48A372441667663365C8E8F324C3C735BBA0265D4A5E42D762CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Local Settings OpenWith.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Local Settings cmd.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3200 OpenWith.exe