Analysis
- max time kernel
149s - max time network
123s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
09/07/2026, 03:45
Behavioral task
behavioral1
Sample
TraceArt.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
TraceArt.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Behavioral task
behavioral3
Sample
TraceArt.pyc
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
TraceArt.pyc
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
General
- Target TraceArt.pyc
- Size 32KB
- Sample260709-ebadwsds3x
- SHA256 7b58b3b656c948d97fb1bef9a0d367f51acc6ec36b84099c68851ab0ee249473
- MD5 0bbad83ad9f36045297089f93c6ff3e1
- SHA1 ca64d4552e31d1a39deddc6482cbdf183c5cf3aa
- SHA512 6766770592efb6b2ea0b9ddbde3615bcd567c2f0808662e239c34ffc653be492e072cb092ba8b186b900ed1ec7fc0ff889777804f39362479e5eee6c550c733d
- SSDEEP 768:AACvBWs6g1Z3CekdBiTBYQLapZ5j1OnQsaceVVGj0:A9vEs6g1ZRuBiTBYQLapZVI5ngVGY
- TLSH T1A9E2D785BB63C133FCA9F1BA4C5A379AF3A486B07715931B90F781B01E87A618D810DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2580 OpenWith.exe