5b02faad3adaa4a345767c2cf832cb84b585426722eb1805c309d20a4e2b9323

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/07/2026, 16:25

Target
25-Nuke-main/main.py
Size 51KB
Sample260709-tw3cqset5s
SHA256 5b02faad3adaa4a345767c2cf832cb84b585426722eb1805c309d20a4e2b9323
MD5 b2c28fd269fbcd2ad3dd8006b65fc46e
SHA1 ac7098e98baddd8129f3e86a4ca8c82585058821
SHA512 cdc67f0b699b4a51af7719bf8dd767f75b76e780aecc845eb7baacee8fc6e8e79444fc3acee6f8bff626e7f55ae373e11981aef32aa2fa3df527f56745c4f48c
SSDEEP 1536:hrMdcAJP5xH4erATTpvsB31ozkD+HYwUwVxeUasvP+D0wxOlGB53AguWS:hrMdc4P5xH4eETTpvk31ozkD+HYwUwVb
TLSH
T1A73371319C4A51229532DC1D48B6AD12F35C3243A9385527B9ECA4C9AFFC530EEB8E7D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1590476978-4004838454-3790292847-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-1590476978-4004838454-3790292847-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2360	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\25-Nuke-main\main.py
1⤵
- Modifies registry class
PID:592

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact