557d5f6d79a2fea97feecc6fddf0ff18d97e0ca477f3502afa18495c6a0d420a

Resubmissions

27/06/2026, 04:57

260627-flrllagx8z8

27/06/2026, 04:47

260627-fe1wpahv3k8

Analysis

user interaction
yes
max time kernel
12s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/06/2026, 04:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
launcher.pyc
Size 206B
Sample260627-fe1wpahv3k
SHA256 557d5f6d79a2fea97feecc6fddf0ff18d97e0ca477f3502afa18495c6a0d420a
MD5 693b34de096abcba892dfb3aebb63688
SHA1 17c7716db14077ddfd851a7532cfd114fa8084d8
SHA512 1efa3279e151176a3bfce29c9268214d66d0709d6c221e9b743741d14db24335886daf236ba4854f95be7b6f323e2fa2a3e0f26b6dfbdc8c58b44afb5803a725
TLSH
T178D08041D5607A12C64C0734B4FB95F615718C4C9293D45310D9262E1FED3559C50985
MD5 SHA1 SHA512 TLSH

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-487906980-2895880840-1957110281-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-487906980-2895880840-1957110281-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3724	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\launcher.pyc
1⤵
- Modifies registry class
PID:2448

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3724

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads