7229e2ea9915c41c2d6a3f42129c63774845a9c6ec2763e76f24b3d1cf7fb108

Resubmissions

20/06/2026, 04:41

260620-fbkejaet9y8

20/06/2026, 04:32

20/06/2026, 04:31

20/06/2026, 04:17

20/06/2026, 04:17

20/06/2026, 04:13

Analysis

max time kernel
898s
max time network
400s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
20/06/2026, 04:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ReShade Pro 2k-4k Forza Horizon 6.ini
Size 21KB
Sample260620-e51g6sc19l
SHA256 7229e2ea9915c41c2d6a3f42129c63774845a9c6ec2763e76f24b3d1cf7fb108
MD5 c473908a81bab1e7ef9c5781ca2fcc40
SHA1 54e802528a585f5b910bcdc0572f4b60bb9e85b5
SHA512 16c45bb386c65eb786a3dc8ad78b215564b8a3b2402d5ea6e933f9d526c0d0c5befaeef3b7227f838a345a3a7fc7e50e40016b6149767320a33fd2889c51b1ea
SSDEEP 384:U02CTarQU4QmfYhiWs3e6jqTuVQPYKRDvbQc2jwuv/xSTSTNjj2cHmu4:IrrQ2mffWs3Xjqfkjwuv/xSTSTda84
TLSH
T18CA209DBDB2909C6FC42A18EECF679F018F6359F8CCC96545DD8202A7CE1E4D150A926
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-2654269261-3199571979-4291878722-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3416	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\ReShade Pro 2k-4k Forza Horizon 6.ini"
1⤵
- Modifies registry class
PID:924

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3416

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads