Overview
overview
3Static
static
1CVE-2026-4...in.zip
windows10-ltsc_2021-x64
1CVE-2026-4...ci.yml
windows10-ltsc_2021-x64
3CVE-2026-4...ignore
windows10-ltsc_2021-x64
3CVE-2026-4...LOG.md
windows10-ltsc_2021-x64
3CVE-2026-4...ING.md
windows10-ltsc_2021-x64
3CVE-2026-4...ICENSE
windows10-ltsc_2021-x64
1CVE-2026-4...DME.md
windows10-ltsc_2021-x64
3CVE-2026-4...ITY.md
windows10-ltsc_2021-x64
3CVE-2026-4...poc.py
windows10-ltsc_2021-x64
3CVE-2026-4...tup.py
windows10-ltsc_2021-x64
3CVE-2026-4....cache
windows10-ltsc_2021-x64
3CVE-2026-4...a.json
windows10-ltsc_2021-x64
3CVE-2026-4...ta.bin
windows10-ltsc_2021-x64
3CVE-2026-4...a.json
windows10-ltsc_2021-x64
3CVE-2026-4..._0.dat
windows10-ltsc_2021-x64
3CVE-2026-4..._1.dat
windows10-ltsc_2021-x64
3CVE-2026-4..._2.dat
windows10-ltsc_2021-x64
3Analysis
- max time kernel
898s - max time network
499s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-fr - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-frlocale:fr-fros:windows10-ltsc_2021-x64systemwindows - submitted
08/06/2026, 15:25
Static task
static1
Behavioral task
behavioral1
Sample
CVE-2026-41089-986-main.zip
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral2
Sample
CVE-2026-41089-986-main/.github/workflows/ci.yml
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral3
Sample
CVE-2026-41089-986-main/.gitignore
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral4
Sample
CVE-2026-41089-986-main/CHANGELOG.md
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral5
Sample
CVE-2026-41089-986-main/CONTRIBUTING.md
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral6
Sample
CVE-2026-41089-986-main/LICENSE
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral7
Sample
CVE-2026-41089-986-main/README.md
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral8
Sample
CVE-2026-41089-986-main/SECURITY.md
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral9
Sample
CVE-2026-41089-986-main/poc.py
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral10
Sample
CVE-2026-41089-986-main/setup.py
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral11
Sample
CVE-2026-41089-986-main/src/data/processed/temp\cache\build\index.cache
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral12
Sample
CVE-2026-41089-986-main/src/data/processed/temp\cache\build\metadata.json
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral13
Sample
CVE-2026-41089-986-main/src/data/processed/temp\cache\data.bin
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral14
Sample
CVE-2026-41089-986-main/src/data/processed/temp\cache\metadata.json
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral15
Sample
CVE-2026-41089-986-main/src/models/checkpoints/cache/weights/823f7f1e_cache_0.dat
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral16
Sample
CVE-2026-41089-986-main/src/models/checkpoints/cache/weights/823f7f1e_cache_1.dat
Resource
win10ltsc2021-20260513-fr
Behavioral task
behavioral17
Sample
CVE-2026-41089-986-main/src/models/checkpoints/cache/weights/823f7f1e_cache_2.dat
Resource
win10ltsc2021-20260513-fr
General
- Target CVE-2026-41089-986-main/src/models/checkpoints/cache/weights/823f7f1e_cache_0.dat
- Size 20.0MB
- Sample260608-stmc3agy4v
- SHA256 5f86d3023222000bf8d723b919b52e1d41ad9fb45ffa7c7b744b5f6627aa0a57
- MD5 36513875bb81101ac30d1a473fa9a95f
- SHA1 746b135d62951deb345749afcd0c486094a862b6
- SHA512 1328a63647a76f20fa635de4747fc91d61b3bf2dcacbd641226f253fe200fcbfe06a68b3ace20af96a173843da812453f9aed42f2309ba487241d7822632807e
- SSDEEP 393216:/MIDoVJvg7OxN/lkfc0yHwVhOPl6OBB/Hvz2Rmv35Su1W8YKF3W5Y:5DoIOxRlkPQ6hQQOBBPiRmv3b1fYKF3V
- TLSH T1142733E58A35570BEC29147AA379FE4E79C07B50F8B39854B48F960B38BB6005274EF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2440 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\CVE-2026-41089-986-main\src\models\checkpoints\cache\weights\823f7f1e_cache_0.dat1⤵
- Modifies registry class
PID:4228
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2440