dd4fdb2c148d341204e4a8b80746d1e06dea7c56a93fac11ae340173d95943fc

Resubmissions

25/06/2026, 15:38

260625-s3cvzscz6s7

25/06/2026, 14:49

260625-r7b9kscx3s8

20/06/2026, 16:21

260620-tttmtahs3w8

Analysis

max time kernel
149s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/06/2026, 16:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
DiscordcolorSkin_WOB.json5
Size 21KB
Sample260620-tttmtahs3w
SHA256 dd4fdb2c148d341204e4a8b80746d1e06dea7c56a93fac11ae340173d95943fc
MD5 ccb5345842c7a5b7a87ccc56ad03feb4
SHA1 9f72d7f26c421daa7cf721d30b5633b5e0de7078
SHA512 7f9da1086c0a3cefe0b72cb3d4c745041a3c22f830e0ef203762b98e0d1db2a5d96bc39cea6b44190a3f14dcc0f794c2155e7c83202a7e4bd4fca09c4f3862a6
SSDEEP 384:A/z4dNhdM6T29g4ctkbTD9Advdl8Oct/ZmIVEabP0NN2gM3bHPN6u2iMkrdCtykD:vWbVD4z
TLSH
T196A2A9A6ED881D7B123B169897550981F2E5739F804C058F34FDA0AC2F7D8464EE9B8F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1940	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\DiscordcolorSkin_WOB.json5
1⤵
- Modifies registry class
PID:2216

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1940

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads