Analysis
- max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
08/06/2026, 14:20
Static task
static1
Behavioral task
behavioral1
Sample
bypass1.py
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
bypass1.py
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target bypass1.py
- Size 4KB
- Sample260608-rnp2bsfw8x
- SHA256 5e524b010e23543b8423b86b7b8a41f9924161f812c0b8819d04e4e2e1431071
- MD5 60afbc5440ed8f202a1ccfea43c25ad7
- SHA1 4b5d6727bff9ff3928992aee3fa71539108f0bc1
- SHA512 af1fd30c1c4bd026cc52995cf2c5ae837d92a27388478d91e75ebe025148eeeaf45ef3cc3fa0aa246f32b6484de093014d1804ef49bf18e99bb27ee0b623199f
- SSDEEP 96:u7YtD/LZVh9BArS1GTASPck9Pi7jTTzsfAT0QZXglMS9ZQk+CB:CU/LZZHSEkGjTXn0OgmSPB
- TLSH T190A11032C947172503B588484DA2E89DF31E2AEBAF3B1515F9DCC2D83F355189A615FC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings OpenWith.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings cmd.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2884 OpenWith.exe