6393961d36de2f962addb2ea0deba5041417c72f12e1414648e5e7eee1f0e420

Analysis

max time kernel
148s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/07/2026, 15:02

Target
Void-Tools-v2.0-main/Void/tools/website-cloner/en.py
Size 4KB
Sample260709-see1fadv21
SHA256 6393961d36de2f962addb2ea0deba5041417c72f12e1414648e5e7eee1f0e420
MD5 0f9e605b876bef3132f5f6ac6dd68748
SHA1 97b768b5b4b0d5f32daaad4eb60d6c29a31b37db
SHA512 16964e4abbba9e6537ecd074fc77843c88fbd96bc749483f356aec7c0d083ddb05e07e5399948185e82b4c8fe3380d58bbac31211b3543e525403e91b37edefb
SSDEEP 96:k5bx5v9x2PflVzDf+VmH9ZySAca3z/tnzgynjFOOovmzz/0XWPx7oDFT:k5bx5vKr01PFMuF1JzSWJ7oDFT
TLSH
T1D2A1BB325850333093AE4C14A8F3FC2C6B6129D3CA726024F9ED82D46FA5C318D65AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2049790993-2338060321-149346055-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-2049790993-2338060321-149346055-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
6028	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Void-Tools-v2.0-main\Void\tools\website-cloner\en.py
1⤵
- Modifies registry class
PID:4700

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact