Analysis
- max time kernel
898s - max time network
531s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
07/07/2026, 04:29
Behavioral task
behavioral1
Sample
Kemono Downloader.exe
Resource
win10v2004-20260513-en
14 signatures
900 seconds
Behavioral task
behavioral2
Sample
Kemono Downloader.exe
Resource
win11ltsc2024-20260706-en
11 signatures
900 seconds
Behavioral task
behavioral3
Sample
main.pyc
Resource
win10v2004-20260513-en
3 signatures
900 seconds
Behavioral task
behavioral4
Sample
main.pyc
Resource
win11ltsc2024-20260706-en
14 signatures
900 seconds
General
- Target main.pyc
- Size 7KB
- Sample260707-e4fflshy2t
- SHA256 acefe47f1ef1d7a6ec4723d444d740eb575b1b1426bd87722bafeb6a8a79341f
- MD5 88c2ddf147498a39b146ebdba4b7cbf0
- SHA1 94af1b74a1364d7f8fb8c628fd5a59159610292d
- SHA512 ceb92654d8a8056eaba737983cef7d445fe6ac038771d915e5fa4ff46cfef11ca4f6574dbc3f20915dae0b5a9525e4f7fe87308e119962a36f4fa1e11ebf69a9
- SSDEEP 96:lyEocGtVPlJasiddVis7qvpi1RCNe7PQ0edlwfrAjf5zI2/22gC+1FC0h3C:mhkVis7JLCNe7JedlsAjBzI62YxG3C
- TLSH T17DE1C7866F63C033F954D07A54213B4BE3B293B77B60D30331FA95292E860658C6E1DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2120 OpenWith.exe