17ce077343c6133f8c9f2d6d6d9a4ab62c8cd2aa57c40aea1f490b4c8bb21d91

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/06/2026, 22:56

Target
Super Mario 64 (USA).z64
Size 8.0MB
Sample260626-2wva5afs7t
SHA256 17ce077343c6133f8c9f2d6d6d9a4ab62c8cd2aa57c40aea1f490b4c8bb21d91
MD5 20b854b239203baf6c961b850a4a51a2
SHA1 9bef1128717f958171a4afac3ed78ee2bb4e86ce
SHA512 b108cb20e0181b7ea029b19c6070b8108c96417da88c3d2e7e52cf9f1ed2171218ef1417c3b3c70facbb28a1b1a07cc36c4076cf9e845d543085a81993d51adb
SSDEEP 196608:LVE0hZqJ8V/TC+rB+4IWoKqWqXI/3rXjnf92lTGH:ZWJM+4IWodWX79cTGH
TLSH
T10E86E117FB29B311C5390970C6B64B2883E29C56A9646F0B6344B620ACB725F3D1FFD9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2882181966-868590553-1461876573-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-2882181966-868590553-1461876573-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
6016	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Super Mario 64 (USA).z64"
1⤵
- Modifies registry class
PID:5600

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact