Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/06/2026, 12:14
Behavioral task
behavioral1
Sample
test_exe.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
test_exe.exe
Resource
win11ltsc2024-20260630-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
protections.pyc
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
protections.pyc
Resource
win11ltsc2024-20260630-en
9 signatures
150 seconds
Behavioral task
behavioral5
Sample
source_prepared.pyc
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
source_prepared.pyc
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
General
- Target source_prepared.pyc
- Size 56KB
- Sample260630-pegbqaex4r
- SHA256 192136af2a327b174b7e499b4522b1471f552fc8ab59200b19091a33307b7e00
- MD5 249f7f34acc182c61d0e38c939f9764c
- SHA1 f9cf8a9de7e444f620d81eb781885afe408fd7e3
- SHA512 d2f95e59500fe1c35cd3528e1cb8e70a2b54d7af86725d50a84ce5bcb6df4cd76b694b0c75dec449e481877f12318a8037dda725c1806d19074eb9cf615b0592
- SSDEEP 768:LN3dFR+jhl5fzNJYsiJugRH2N12wSoqy0zyUruaGioHwU5YasICZK2s2hN:Lz3+jD5fJJpiJRaSVyJpQOYasIUfdhN
- TLSH T1C0434BB89178486BEEC5F03975C2DBE2BB22C090A500C743F5198DF6BFCD6515A86A3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1512 OpenWith.exe