df0ec2f149179fda90af70ee5f82fec7fc079885c06e086e8661119b452fa29c

Analysis

max time kernel
148s
max time network
123s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/06/2026, 03:17

Target
Scropts-QOL-3.0.8/ImGui DirectX 11 Kiero Hook/ImGui DirectX 11 Kiero Hook.vcxproj.filters
Size 5KB
Sample260624-ds91eahz8p
SHA256 df0ec2f149179fda90af70ee5f82fec7fc079885c06e086e8661119b452fa29c
MD5 ed8be5d650719c58e41771336d7f3550
SHA1 33f5d289f6829226febc6a9b7ccb6fd444431df5
SHA512 9f394d8fe792d58edd5213ffd9208c3fff2c3db7d045b1dac9ddf2f1ceecc2b34410bc777ddd99af46eff37c4ad738b77a9b3155932fe04bdcac99a05fd5daf8
SSDEEP 96:AzdWys2ldAD4WHX4Hfh52xjxrS8l3gFRxDuiRdMIFjFr1LW7Et5:/ys2dAD4WHoHaS8l3gFLDuiR/uEr
TLSH
T1ECB1A131D4FC1E8C203309A7FB94DE02DE28B3E3505642997AA9E587BFF3509D217269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3246620872-1649211507-2285877732-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-3246620872-1649211507-2285877732-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5888	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Scropts-QOL-3.0.8\ImGui DirectX 11 Kiero Hook\ImGui DirectX 11 Kiero Hook.vcxproj.filters"
1⤵
- Modifies registry class
PID:6104

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact