4ef715dc447c0492e069e759b94cd8b577b9cdc5252871b4988057e270dd5470

Analysis

max time kernel
898s
max time network
388s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
08/06/2026, 23:33

Target
_Getintopc.com_Adobe.Flash.Pro.CC.2015.iso
Size 1024.0MB
Sample260608-3jynfsgw2x
SHA256 4ef715dc447c0492e069e759b94cd8b577b9cdc5252871b4988057e270dd5470
MD5 bb95b2831e5d856e81a7a71fe0cc5da0
SHA1 e8e5d2b066989e554b8c7018ac8a39b6c1a65819
SHA512 de3a1af0c04049943e9f63ab17109f740917cd728686cb988539d9c68a88df04b0b579aa1ae32994a2a9730bb85642dfdf78679e33be6f2a7b3dc61ae6142566
SSDEEP 25165824:VReQYRv3fOUafPnHJ4H0j5eBb/wqU2esP2xIyGXkRy2M8Fbh8l:qHRv3fOU2H2HKeBvU2QxIGy2M8FF8l
TLSH
T17EB9337C62701476E202B3F1AB941BE5EE2D903F93305492F2991B5F19F21CD5A2B72E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\Local Settings	cmd.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeManageVolumePrivilege	4648	cmd.exe
Token: SeManageVolumePrivilege	4648	cmd.exe

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact