Overview
overview
7Static
static
3USBUTIL_v2...sh).7z
windows11-21h2-x64
7USBUTIL v2...AD.elf
windows11-21h2-x64
3USBUTIL v2...16.img
windows11-21h2-x64
3USBUTIL v2...65.img
windows11-21h2-x64
3USBUTIL v2...20.img
windows11-21h2-x64
3USBUTIL v2...02.img
windows11-21h2-x64
3USBUTIL v2...sh.exe
windows11-21h2-x64
3USBUTIL v2...sh.exe
windows11-21h2-x64
3USBUTIL v2...il.aso
windows11-21h2-x64
3USBUTIL v2...il.dna
windows11-21h2-x64
3USBUTIL v2...il.dni
windows11-21h2-x64
3USBUTIL v2...il.ljs
windows11-21h2-x64
3USBUTIL v2...il.rcn
windows11-21h2-x64
3Analysis
- max time kernel
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
03/07/2026, 18:44
Static task
static1
Behavioral task
behavioral1
Sample
USBUTIL_v2.2_rev1.0_EN (English).7z
Resource
win11-20260513-en
Behavioral task
behavioral2
Sample
USBUTIL v2.2 rev1.0 EN/PS2LOAD.elf
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
USBUTIL v2.2 rev1.0 EN/SCEE_DD/IOPRP16.img
Resource
win11-20260513-en
Behavioral task
behavioral4
Sample
USBUTIL v2.2 rev1.0 EN/SCEE_DD/IOPRP165.img
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
USBUTIL v2.2 rev1.0 EN/SCEE_DD/IOPRP20.img
Resource
win11-20260513-en
Behavioral task
behavioral6
Sample
USBUTIL v2.2 rev1.0 EN/SCEE_DD/IOPRP202.img
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
USBUTIL v2.2 rev1.0 EN/USBUtil v2.2 rev1.0_English.exe
Resource
win11-20260513-en
Behavioral task
behavioral8
Sample
USBUTIL v2.2 rev1.0 EN/USBUtil v2.2 rev1.0_Spanish.exe
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
USBUTIL v2.2 rev1.0 EN/usbutil.aso
Resource
win11-20260513-en
Behavioral task
behavioral10
Sample
USBUTIL v2.2 rev1.0 EN/usbutil.dna
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
USBUTIL v2.2 rev1.0 EN/usbutil.dni
Resource
win11-20260513-en
Behavioral task
behavioral12
Sample
USBUTIL v2.2 rev1.0 EN/usbutil.ljs
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
USBUTIL v2.2 rev1.0 EN/usbutil.rcn
Resource
win11-20260513-en
General
- Target USBUTIL v2.2 rev1.0 EN/SCEE_DD/IOPRP16.img
- Size 89KB
- Sample260703-xdncmsaz8n
- SHA256 520d74545b4e24dc25ab0d01c660da271c199080d0834b38a20114caeadc991d
- MD5 8093588e168e015bf3f85413f6aa991b
- SHA1 8804a72c4be4651bfe47ef4fa3a8b85e2f8e6230
- SHA512 041dfdccbbd69f47d480f859f55a66f4eecbaaeef5fefe105cd3e9f447230a181278f8b00d9c5c9313db1b5ed82430ef1fbf7d49f72d5e6e3bb2da9ef7a4cd8b
- SSDEEP 1536:ReGLkOq+xRV/ZgrbRLVixGm2/MmWdj2kjHGiaQ/XapQiR/PLoCcZk:ReSkYRZ4lL+Hj2k7GiaQ/KpQ2W
- TLSH T1D593B386CF76AEEBC47D0A3CCDFB06517A2802C55056A2AE43343C7471A63369ADF5D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-125073035-2952146151-721812867-1000_Classes\Local Settings cmd.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeManageVolumePrivilege 1968 cmd.exe