Overview
overview
7Static
static
7�...up.dll
windows11-21h2-x64
1�...up.dll
windows11-21h2-x64
3�...un.inf
windows11-21h2-x64
3�...a1.cab
windows11-21h2-x64
1�...a1.hdr
windows11-21h2-x64
1�...a2.cab
windows11-21h2-x64
1�...ut.bin
windows11-21h2-x64
3�...up.exe
windows11-21h2-x64
3�...up.ini
windows11-21h2-x64
3�...up.inx
windows11-21h2-x64
3Analysis
- max time kernel
28s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
08/07/2026, 18:37
Behavioral task
behavioral1
Sample
~NQHatsuneMiku/ISSetup.dll
Resource
win11-20260513-en
Behavioral task
behavioral2
Sample
~NQHatsuneMiku/_Setup.dll
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
~NQHatsuneMiku/autorun.inf
Resource
win11-20260513-en
Behavioral task
behavioral4
Sample
~NQHatsuneMiku/data1.cab
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
~NQHatsuneMiku/data1.hdr
Resource
win11-20260513-en
Behavioral task
behavioral6
Sample
~NQHatsuneMiku/data2.cab
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
~NQHatsuneMiku/layout.bin
Resource
win11-20260513-en
Behavioral task
behavioral8
Sample
~NQHatsuneMiku/setup.exe
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
~NQHatsuneMiku/setup.ini
Resource
win11-20260513-en
Behavioral task
behavioral10
Sample
~NQHatsuneMiku/setup.inx
Resource
win11-20260513-en
General
- Target ~NQHatsuneMiku/layout.bin
- Size 473B
- Sample260708-w9vwxsf14t
- SHA256 e557470d17f3e644b6e25ee3f77160e7f29bc68273f7f3fafa41cef944a7cbb8
- MD5 13c03cfef1c076003ee0b463cba59611
- SHA1 97b15561fe6be32db095047875f39f01374ab28a
- SHA512 b98a8503123c90575b9a5490c81aac25adb232a67b638d6f6f026f4c32dc828059194227bf2d2321f1c532b54b5a15b3b6ac6e2132065f98c9c424691a84e5c7
- TLSH T1D2F0121728275808C12BD97B187F041E0ED17DE00022D69B734160572C6D748EE481F6
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2824035265-2271499813-2042964211-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-2824035265-2271499813-2042964211-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4108 OpenWith.exe