254210adc9ab536eae5fff9a1f19ab0db3a570b55ee1c593497b5d544bb2bf30

Analysis

max time kernel
149s
max time network
190s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/06/2026, 03:49

Target
Mage Kanade's Futanari Dungeon Quest/Mage Kanades Futanari Dungeon Quest_Data/StreamingAssets/aa/Sta.bundle
Size 1KB
Sample260623-edd5vsav7w
SHA256 254210adc9ab536eae5fff9a1f19ab0db3a570b55ee1c593497b5d544bb2bf30
MD5 38d9f5d66ffd10f716785c6620337c6c
SHA1 2d789eff822ace74ea869e166e5dffa223fcab2c
SHA512 522600cc39e1807e44232648cbc7618239f79f711d32c66f858f0caa20b3e8450e90cb45f7fd6ce43cc3349ffda7a19ee6f2bda91847cbe604671096972a5af4
TLSH
T18841B7092AD5C402C1940F7A50C6AF368D1FDB4AE416A28B14A3C63DCC3DBED4617257
MD5 SHA1 SHA512 TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3688	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Mage Kanade's Futanari Dungeon Quest\Mage Kanades Futanari Dungeon Quest_Data\StreamingAssets\aa\Sta.bundle"
1⤵
- Modifies registry class
PID:3724

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact