caadbfd22c6ad04ffb54a9e863d7dc8b5199df657a9f44f870a81f97348c796d

Analysis

max time kernel
148s
max time network
121s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/06/2026, 12:09

Target
at-dead-of-night-2020.torrent
Size 13KB
Sample260625-pbmpbsbt7x
SHA256 caadbfd22c6ad04ffb54a9e863d7dc8b5199df657a9f44f870a81f97348c796d
MD5 d8cfc92c84ec1b21bc8b181e44665da0
SHA1 24a89407c0f6c6b716a57646d32d143b818db941
SHA512 d1c33c62d8bf47bf266493c1e113dcf4ee838009627def58eccda0b949896e4a73160df28bd32284960bdc45b16ddb83f4bdfd575c70a1d4137c89ca46419755
SSDEEP 384:wMawDrs4uqIumOms5cKEMuFts0S+5L9LFw4qiV1NKX7ZcqgkClK+D6cH0DAG1xaQ:+b18ZcqgkClzDx0sGPaUkwngfnwb
TLSH
T105529DE9E1A201143294306EFBEA51362E6DF924BF9C765ACB201B8931CC45FB5BA215
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4118910392-3846778420-3545080915-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-4118910392-3846778420-3545080915-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3968	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\at-dead-of-night-2020.torrent
1⤵
- Modifies registry class
PID:5056

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact