33eed92d24947ffffd4934961ac3f9004c2d56f776d5e0b20af5aa0fab027a13

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/06/2026, 23:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
pinger-main/main.py
Size 4KB
Sample260620-23v61aa13s
SHA256 33eed92d24947ffffd4934961ac3f9004c2d56f776d5e0b20af5aa0fab027a13
MD5 b3847e7f4a4ffeefc747d4ce5b57c4b2
SHA1 76e1702e54f3d17b79fbd41ea4694285344a6221
SHA512 9148d0c3ce0b35cffbef1ac2449a62fd0409d38c0f9fc02755fa924ecf710b81e9fd2230be95274344183228476c652f49703034e18cc10906a5afdc22d82b30
SSDEEP 96:l/MnfG9aPcxzZaTdIaGTyH5nAzrtLmQr+xsP+EPdUg:tMnfsakhZaxRGTSJAzrtLmQr+aP+w2g
TLSH
T1CE912F34CC5E2D91939A983CDC8AD0507726FC478E49B43AB5EC42802F8997586BDC7E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
2884	cmd.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3372	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\pinger-main\main.py
1⤵
- System Network Configuration Discovery: Internet Connection Discovery
- Modifies registry class
PID:2884

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3372

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads