Overview
overview
8Static
static
3geany-plug...up.exe
windows10-2004-x64
4geany-plug...up.exe
windows11-ltsc_2024-x64
4share/gean...c.conf
windows10-2004-x64
3share/gean...c.conf
windows11-ltsc_2024-x64
3share/gean...a.conf
windows10-2004-x64
3share/gean...a.conf
windows11-ltsc_2024-x64
8share/gean...gs.lua
windows10-2004-x64
3share/gean...gs.lua
windows11-ltsc_2024-x64
8share/gean...og.lua
windows10-2004-x64
3share/gean...og.lua
windows11-ltsc_2024-x64
3share/gean...or.lua
windows10-2004-x64
3share/gean...or.lua
windows11-ltsc_2024-x64
8share/gean...ce.lua
windows10-2004-x64
3share/gean...ce.lua
windows11-ltsc_2024-x64
3share/gean...se.lua
windows10-2004-x64
3share/gean...se.lua
windows11-ltsc_2024-x64
8share/gean...se.lua
windows10-2004-x64
3share/gean...se.lua
windows11-ltsc_2024-x64
3share/gean...im.lua
windows10-2004-x64
3share/gean...im.lua
windows11-ltsc_2024-x64
3share/gean...ck.lua
windows10-2004-x64
3share/gean...ck.lua
windows11-ltsc_2024-x64
3share/gean...ut.lua
windows10-2004-x64
3share/gean...ut.lua
windows11-ltsc_2024-x64
3share/gean...on.lua
windows10-2004-x64
3share/gean...on.lua
windows11-ltsc_2024-x64
8share/gean...on.lua
windows10-2004-x64
3share/gean...on.lua
windows11-ltsc_2024-x64
3share/gean...es.lua
windows10-2004-x64
3share/gean...es.lua
windows11-ltsc_2024-x64
3share/gean...me.lua
windows10-2004-x64
3share/gean...me.lua
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
21/06/2026, 04:06
Behavioral task
behavioral1
Sample
geany-plugins-2.1_setup.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
geany-plugins-2.1_setup.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
share/geany-plugins/geanygendoc/filetypes/c.conf
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
share/geany-plugins/geanygendoc/filetypes/c.conf
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral5
Sample
share/geany-plugins/geanygendoc/filetypes/vala.conf
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
share/geany-plugins/geanygendoc/filetypes/vala.conf
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral7
Sample
share/geany-plugins/geanylua/dialogs/basic-dialogs.lua
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
share/geany-plugins/geanylua/dialogs/basic-dialogs.lua
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral9
Sample
share/geany-plugins/geanylua/dialogs/complex-dialog.lua
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
share/geany-plugins/geanylua/dialogs/complex-dialog.lua
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral11
Sample
share/geany-plugins/geanylua/edit/calculator.lua
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
share/geany-plugins/geanylua/edit/calculator.lua
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral13
Sample
share/geany-plugins/geanylua/edit/lua-replace.lua
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
share/geany-plugins/geanylua/edit/lua-replace.lua
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral15
Sample
share/geany-plugins/geanylua/edit/proper-case.lua
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
share/geany-plugins/geanylua/edit/proper-case.lua
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral17
Sample
share/geany-plugins/geanylua/edit/reverse.lua
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
share/geany-plugins/geanylua/edit/reverse.lua
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral19
Sample
share/geany-plugins/geanylua/edit/right-trim.lua
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
share/geany-plugins/geanylua/edit/right-trim.lua
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral21
Sample
share/geany-plugins/geanylua/edit/select-block.lua
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
share/geany-plugins/geanylua/edit/select-block.lua
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral23
Sample
share/geany-plugins/geanylua/info/about.lua
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
share/geany-plugins/geanylua/info/about.lua
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral25
Sample
share/geany-plugins/geanylua/info/app-information.lua
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
share/geany-plugins/geanylua/info/app-information.lua
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral27
Sample
share/geany-plugins/geanylua/info/file-information.lua
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
share/geany-plugins/geanylua/info/file-information.lua
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral29
Sample
share/geany-plugins/geanylua/info/list-open-files.lua
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
share/geany-plugins/geanylua/info/list-open-files.lua
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral31
Sample
share/geany-plugins/geanylua/info/show-filename.lua
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
share/geany-plugins/geanylua/info/show-filename.lua
Resource
win11ltsc2024-20260618-en
General
- Target share/geany-plugins/geanygendoc/filetypes/c.conf
- Size 4KB
- Sample260621-ephbnact7y
- SHA256 fc34dbb23da22f4a6b847360f1cab46edda685fd4b9fec4b7dde0cde4ed716d7
- MD5 b1e29b82adf0c962067511e8fdb1e1d9
- SHA1 b8d48244504388804702c6e3a40245a996fa83c3
- SHA512 38096a50272b75280a4a0081e4425af398fe417ff6e6d9530091babf6945a93bf977587299c1017a51cdfe733014d0a9e0d8112e670f9ebaedd0b7dc6509aee1
- SSDEEP 48:Fdd+lJ9d7vGwpCndgvn/Xjm8hDDlkit6tTX5pAXEo/49RSKmRSKvXr1XxebOQ5:Fv+pdy0Cnd6/KgDDRWTrS9SL
- TLSH T13AA1DC662051E15B46B1533ABDC2458EFF22E2177A10900DB6CEA3644F7321B83BEFE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3936 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\share\geany-plugins\geanygendoc\filetypes\c.conf1⤵
- Modifies registry class
PID:1868
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3936