6f08145f6ef4ba24d80acc026c7ee0b8591023e80969e5fc8c46c03d52be6a08

Analysis

max time kernel
149s
max time network
231s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/06/2026, 03:49

Target
Mage Kanade's Futanari Dungeon Quest/Mage Kanades Futanari Dungeon Quest_Data/StreamingAssets/aa/Sta.bundle
Size 49KB
Sample260623-edd5vsav7w
SHA256 6f08145f6ef4ba24d80acc026c7ee0b8591023e80969e5fc8c46c03d52be6a08
MD5 0d5bb0bb70cfab710587b6dfeac0d595
SHA1 c1c09d856c4a945b4f3bfce6f4ae244c2a7b1b55
SHA512 96f6cb635817b5aa9cee689513ac869a8c7f07df75abee0c8e571c250b8b1b8e48404de6508fba47d53ebba14420329329d0bbfac04d631099325628899b9c86
SSDEEP 768:3+49BQfsexEmtidqWvBIQwRRmsVZQGm4KeExoql+UFagLPA9xyD1yekTJs4oGnrl:3+f5tTbQwRRmmYeafFrLP8xGLkT6erRD
TLSH
T1C533F171243F5AA332E9C42E0108265AC3D23E967274617F3612F3E4857F5838D4B7AE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4720	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Mage Kanade's Futanari Dungeon Quest\Mage Kanades Futanari Dungeon Quest_Data\StreamingAssets\aa\Sta.bundle"
1⤵
- Modifies registry class
PID:2768

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact