Overview
overview
3Static
static
1REVision FX.zip
windows10-2004-x64
1REVision FX.zip
windows11-ltsc_2024-x64
1#Pa$$w0rD_...p!.zip
windows10-2004-x64
1#Pa$$w0rD_...p!.zip
windows11-ltsc_2024-x64
1PASS-WORD = 2024.zip
windows10-2004-x64
1PASS-WORD = 2024.zip
windows11-ltsc_2024-x64
1d3dcompiler_47.dll
windows10-2004-x64
1ffmpeg.dll
windows10-2004-x64
1icudtl.dat
windows10-2004-x64
3icudtl.dat
windows11-ltsc_2024-x64
3unins000.exe
windows10-2004-x64
3unins000.exe
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
140s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
09/07/2026, 22:44
Static task
static1
Behavioral task
behavioral1
Sample
REVision FX.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
REVision FX.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
#Pa$$w0rD__2024--0peɴ_Set-Up!.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
#Pa$$w0rD__2024--0peɴ_Set-Up!.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
PASS-WORD = 2024.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
PASS-WORD = 2024.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
d3dcompiler_47.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
ffmpeg.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
icudtl.dat
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
icudtl.dat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
unins000.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
unins000.exe
Resource
win11ltsc2024-20260709-en
General
- Target icudtl.dat
- Size 10.0MB
- Sample260709-2ns34abx21
- SHA256 9ae98c06cbb0ea43c5cd6b5725310c008c65e46072421a1118cb88e1de9a8b92
- MD5 ffd67c1e24cb35dc109a24024b1ba7ec
- SHA1 99f545bc396878c7a53e98a79017d9531af7c1f5
- SHA512 e1a865e685d2d3bacd0916d4238a79462519d887feb273a251120bb6af2b4481d025f3b21ce9a1a95a49371a0aa3ecf072175ba756974e831dbfde1f0feaeb79
- SSDEEP 196608:+SPBhORiYAXHiXUxY/iJ53IWhlVjEeIu2Y6U:++wkpHiXUxY/iJ53IWhlVjEeIZU
- TLSH T160B63807A2FB8DC6F9F76F30E8F452679567BD496E32805911042F3B1D332A08661BB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4396 OpenWith.exe