941214646a518b7dd1176a6932def7f2ac64cadab4a852ca5693a1d70b16dce3

Analysis

max time kernel
149s
max time network
133s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
05/07/2026, 22:49

Target
fern-wifi-cracker-master/Fern-Wifi-Cracker/core/database.py
Size 4KB
Sample260705-2rrz7sf191
SHA256 941214646a518b7dd1176a6932def7f2ac64cadab4a852ca5693a1d70b16dce3
MD5 6399baa86e82cf3498733aadb29bbbb2
SHA1 9eabb19ac4e23551d384403cc36a21f58a2b0f37
SHA512 4fff591d28bbedc7c753d9f9017d1878b027a847be76c27a84579212c6db3483e4686f59e126477a571470da1ffe19b23a213a5ddb04852b9022c45da892c5fa
SSDEEP 48:o21X7ELfKb+hQRo+nAfkv194yqdaTaDzkSKaThwkt9tOt6tKtcqBZOUHuGQ1KNKU:o21XYLU+l+GSLkTYoQnDXRDs7q
TLSH
T143A1F096072AF84043BBD44AEC93D756D729124FF8684A297C7CE0515F39070D2E6F79
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1131776342-1023621610-2767477260-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-1131776342-1023621610-2767477260-1000_Classes\Local Settings	cmd.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4552	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\fern-wifi-cracker-master\Fern-Wifi-Cracker\core\database.py
1⤵
- Modifies registry class
PID:4664

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact