Overview
overview
7Static
static
3USBUTIL_v2...sh).7z
windows11-21h2-x64
7USBUTIL v2...AD.elf
windows11-21h2-x64
3USBUTIL v2...16.img
windows11-21h2-x64
3USBUTIL v2...65.img
windows11-21h2-x64
3USBUTIL v2...20.img
windows11-21h2-x64
3USBUTIL v2...02.img
windows11-21h2-x64
3USBUTIL v2...sh.exe
windows11-21h2-x64
3USBUTIL v2...sh.exe
windows11-21h2-x64
3USBUTIL v2...il.aso
windows11-21h2-x64
3USBUTIL v2...il.dna
windows11-21h2-x64
3USBUTIL v2...il.dni
windows11-21h2-x64
3USBUTIL v2...il.ljs
windows11-21h2-x64
3USBUTIL v2...il.rcn
windows11-21h2-x64
3Analysis
- max time kernel
149s - max time network
95s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
03/07/2026, 18:44
Static task
static1
Behavioral task
behavioral1
Sample
USBUTIL_v2.2_rev1.0_EN (English).7z
Resource
win11-20260513-en
Behavioral task
behavioral2
Sample
USBUTIL v2.2 rev1.0 EN/PS2LOAD.elf
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
USBUTIL v2.2 rev1.0 EN/SCEE_DD/IOPRP16.img
Resource
win11-20260513-en
Behavioral task
behavioral4
Sample
USBUTIL v2.2 rev1.0 EN/SCEE_DD/IOPRP165.img
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
USBUTIL v2.2 rev1.0 EN/SCEE_DD/IOPRP20.img
Resource
win11-20260513-en
Behavioral task
behavioral6
Sample
USBUTIL v2.2 rev1.0 EN/SCEE_DD/IOPRP202.img
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
USBUTIL v2.2 rev1.0 EN/USBUtil v2.2 rev1.0_English.exe
Resource
win11-20260513-en
Behavioral task
behavioral8
Sample
USBUTIL v2.2 rev1.0 EN/USBUtil v2.2 rev1.0_Spanish.exe
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
USBUTIL v2.2 rev1.0 EN/usbutil.aso
Resource
win11-20260513-en
Behavioral task
behavioral10
Sample
USBUTIL v2.2 rev1.0 EN/usbutil.dna
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
USBUTIL v2.2 rev1.0 EN/usbutil.dni
Resource
win11-20260513-en
Behavioral task
behavioral12
Sample
USBUTIL v2.2 rev1.0 EN/usbutil.ljs
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
USBUTIL v2.2 rev1.0 EN/usbutil.rcn
Resource
win11-20260513-en
General
- Target USBUTIL v2.2 rev1.0 EN/SCEE_DD/IOPRP165.img
- Size 96KB
- Sample260703-xdncmsaz8n
- SHA256 9a3f9d337a23c71ade451e95f7fd03e038f4cc4b21d47b3032c57591c83a4557
- MD5 b326b2c91930a524f568a50489435e1d
- SHA1 d8d2bc74ab39ec8d977742517fa803164b7f8512
- SHA512 75c393b080303244b165b85f73627c3f97db7d6f966a26f36995566772305172ae999a9b2bf43ba7a60c8b9ec5dd8cca17de8c28e339ca4fcb8bd17b5269b40b
- SSDEEP 1536:YTeGLkOH04pJKQuaDWNGY4qtIxtljarXXdGJj/u7ILuPtr/Ny:YTeSkSrKQzYi+rnKj/uILuPR
- TLSH T1ABA3A482CF799EDBC87D0E3CCEF70551382852C5611662AE83347CB836AA3715ADB5D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Local Settings cmd.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeManageVolumePrivilege 4288 cmd.exe