Analysis
- user interaction
yes - max time kernel
154s - max time network
114s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/07/2026, 10:46
Static task
static1
Behavioral task
behavioral1
Sample
VirusTuaDee.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral2
Sample
manifest.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
modlist.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral4
Sample
overrides/config/fabric/indigo-renderer.properties
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
overrides/mods/CraftSphere-Dimensions 1.21.11.jar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral6
Sample
overrides/mods/sodium-fabric-0.8.12+mc1.21.11.jar
Resource
win11ltsc2024-20260709-en
General
- Target manifest.json
- Size 1KB
- Sample260710-mt1mssaz4w
- SHA256 481614bf278a8a3bb92165ab390cd9898c525b7d6d01951e32701e046c654b17
- MD5 7cce68239bd22437c81a147e280b98d7
- SHA1 15ddf6504e43b1263cc5569436a35832d8f22feb
- SHA512 4a7d11e5a05125ff720080c591f49eb0311ed9ae9f287fa7658d7f9c72374b5814fa6f2e26f461516c4c64397b68bed3fccfd41a69d00330b7e277c3a7d1a332
- TLSH T1A141081DCDAA4CBB337011AC6C699103E855433B00441DABB9BDA0AC1F72769A29EF75
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4248 OpenWith.exe