c311fbccdf02c16b9e406fb5a256d84c984097cf201847b3f6c52d276992a532

Analysis

max time kernel
899s
max time network
468s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/06/2026, 00:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Last Command Spammer.py
Size 1KB
Sample260628-acd19aes5s
SHA256 c311fbccdf02c16b9e406fb5a256d84c984097cf201847b3f6c52d276992a532
MD5 62ccf88ec97145587a390258639f1f6b
SHA1 7568a304ca1f2c1429dee039006e3b6fea8e1b10
SHA512 cb8bf7fdbf2f0e14d1ca8debf780f6a7366b0abeecfa63923e45d02bd7097cf7932e731ad8085063033421502fe7cd3ccbe6043d7e46db4d19ff7efdeff39314
TLSH
T1693102173C2E25799AFA491FE201D175CF00516B8A68148BF89CBD993FB0569026B179
MD5 SHA1 SHA512 TLSH

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-3226024100-3888324339-2736661264-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5420	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Last Command Spammer.py"
1⤵
- Modifies registry class
PID:904

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:5420

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:3340

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:244

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads