Overview
overview
8Static
static
3RefreshTokenApp.zip
windows10-2004-x64
1RefreshTokenApp.zip
windows11-ltsc_2024-x64
8runtime/co...mplate
windows10-2004-x64
3runtime/co...mplate
windows11-ltsc_2024-x64
3runtime/co...erties
windows10-2004-x64
3runtime/co...erties
windows11-ltsc_2024-x64
3runtime/co...erties
windows10-2004-x64
3runtime/co...erties
windows11-ltsc_2024-x64
8runtime/co...erties
windows10-2004-x64
3runtime/co...erties
windows11-ltsc_2024-x64
3runtime/co...curity
windows10-2004-x64
3runtime/co...curity
windows11-ltsc_2024-x64
8runtime/co...ME.txt
windows10-2004-x64
1runtime/co...ME.txt
windows11-ltsc_2024-x64
1runtime/co...policy
windows10-2004-x64
3runtime/co...policy
windows11-ltsc_2024-x64
8runtime/co...policy
windows10-2004-x64
3runtime/co...policy
windows11-ltsc_2024-x64
3runtime/co...policy
windows10-2004-x64
3runtime/co...policy
windows11-ltsc_2024-x64
3runtime/co...policy
windows10-2004-x64
3runtime/co...policy
windows11-ltsc_2024-x64
3runtime/co...policy
windows10-2004-x64
3runtime/co...policy
windows11-ltsc_2024-x64
3runtime/co...erties
windows10-2004-x64
3runtime/co...erties
windows11-ltsc_2024-x64
3runtime/le...E_INFO
windows10-2004-x64
1runtime/le...E_INFO
windows11-ltsc_2024-x64
1runtime/le...EPTION
windows10-2004-x64
1runtime/le...EPTION
windows11-ltsc_2024-x64
1runtime/le...ICENSE
windows10-2004-x64
1runtime/le...ICENSE
windows11-ltsc_2024-x64
1Analysis
- max time kernel
149s - max time network
143s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/07/2026, 18:00
Static task
static1
Behavioral task
behavioral1
Sample
RefreshTokenApp.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
RefreshTokenApp.zip
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral3
Sample
runtime/conf/jaxp-strict.properties.template
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
runtime/conf/jaxp-strict.properties.template
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral5
Sample
runtime/conf/jaxp.properties
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
runtime/conf/jaxp.properties
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral7
Sample
runtime/conf/logging.properties
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
runtime/conf/logging.properties
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral9
Sample
runtime/conf/net.properties
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
runtime/conf/net.properties
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral11
Sample
runtime/conf/security/java.security
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
runtime/conf/security/java.security
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral13
Sample
runtime/conf/security/policy/README.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
runtime/conf/security/policy/README.txt
Resource
win11ltsc2024-20260630-en
Behavioral task
behavioral15
Sample
runtime/conf/security/policy/limited/default_US_export.policy
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
runtime/conf/security/policy/limited/default_US_export.policy
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral17
Sample
runtime/conf/security/policy/limited/default_local.policy
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
runtime/conf/security/policy/limited/default_local.policy
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral19
Sample
runtime/conf/security/policy/limited/exempt_local.policy
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
runtime/conf/security/policy/limited/exempt_local.policy
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral21
Sample
runtime/conf/security/policy/unlimited/default_US_export.policy
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
runtime/conf/security/policy/unlimited/default_US_export.policy
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral23
Sample
runtime/conf/security/policy/unlimited/default_local.policy
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
runtime/conf/security/policy/unlimited/default_local.policy
Resource
win11ltsc2024-20260630-en
Behavioral task
behavioral25
Sample
runtime/conf/sound.properties
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
runtime/conf/sound.properties
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral27
Sample
runtime/legal/java.base/ADDITIONAL_LICENSE_INFO
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
runtime/legal/java.base/ADDITIONAL_LICENSE_INFO
Resource
win11ltsc2024-20260630-en
Behavioral task
behavioral29
Sample
runtime/legal/java.base/ASSEMBLY_EXCEPTION
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
runtime/legal/java.base/ASSEMBLY_EXCEPTION
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral31
Sample
runtime/legal/java.base/LICENSE
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
runtime/legal/java.base/LICENSE
Resource
win11ltsc2024-20260629-en
General
- Target runtime/conf/logging.properties
- Size 2KB
- Sample260702-wlk2tabt6z
- SHA256 8590633e1e8a7d88ffe74cc04189c5c61b1ed4703180cbc851dcd5575efcce74
- MD5 c4b74648f229c4b7e62a1061ee1dc3f0
- SHA1 5795edcb624326bbefdedcdb6a11d9c18071d8ce
- SHA512 76ea95402f64947c2784f1f8d0857f0d7c963285ae9ebcd9f5cb407d83a14e4da6d14aeb8641c9d9b1c92af4493a4b10e52ad6efda7ae47f265d43df6b4002d0
- TLSH T13251FE5E9B4E2D35430E00AA5A7FF6527E1898BD1C23A5F6B35E6304321D43485DBBC2
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings OpenWith.exe Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings cmd.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4748 OpenWith.exe