aeedef4cbc2d92fea20f9f2ffd5e1e2f0c2b04ce2bf16de844671d3654cbca0d

Analysis

max time kernel
149s
max time network
186s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/06/2026, 03:49

Target
Mage Kanade's Futanari Dungeon Quest/Mage Kanades Futanari Dungeon Quest_Data/StreamingAssets/aa/Sta.bundle
Size 307KB
Sample260623-edd5vsav7w
SHA256 aeedef4cbc2d92fea20f9f2ffd5e1e2f0c2b04ce2bf16de844671d3654cbca0d
MD5 ce87a2f54a567a40d3ddc266c62c23ab
SHA1 123bcc430cd352511b31eb39dc3396fbd0fc11a0
SHA512 ec3dd0f7f103d6eb61416b0f6680f18746bcf09770619b3f59f3aadc33b1a7d768137d66ac24689ce67042463ce76f3ffa9fb79201618b7e8425f1996aa79133
SSDEEP 6144:26QoUflVmLUJjsqFsa/mIb/aMduRPDRQFEjEkAHqzfYVBN2iv:vQjzmLIjsqCa/jduR9KklzgVN
TLSH
T1F964D0E05A99D2D5391F2D13D11FFD3E217C633B988B241E6012A198B63FB770B8E856
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings	cmd.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3436	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Mage Kanade's Futanari Dungeon Quest\Mage Kanades Futanari Dungeon Quest_Data\StreamingAssets\aa\Sta.bundle"
1⤵
- Modifies registry class
PID:4340

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact