f1c0c512e2fd7bf6fe3b51d5d62458198440e658014fe4e0493ce7b9c6a2267b

Analysis

max time kernel
148s
max time network
120s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/07/2026, 14:28

Target
Photoshop 27.5 [Monter Group].dmg.torrent
Size 9KB
Sample260710-rtfd3sdt8t
SHA256 f1c0c512e2fd7bf6fe3b51d5d62458198440e658014fe4e0493ce7b9c6a2267b
MD5 ae3c7c45df62aa26c05534c5564d60ca
SHA1 a3e04a5b8ed6246d1a1129758d48238de30d4ffa
SHA512 7adffd25c220bdea36a3b32b49e3918465cdb1a2c64078848d1ccf4a0f7847dec5c8e631715feee38053ca7e5e3cbc80ba2c38f4c775cdf4e631070be4fe1073
SSDEEP 192:t1qGt1q68EXHOXeO2q04S/ilBuMPAfMcfTDHVEP/wwb4qvfMk8fGVFJSY6vBQ:tsGts68sHOuORm/MBuMcfTDHVEnbdfMm
TLSH
T12A229EE1D8C3442A5B22091C7852B335F76A72489647FF00A47415DEBBAC11EF2C4BEA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2560	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Photoshop 27.5 [Monter Group].dmg.torrent"
1⤵
- Modifies registry class
PID:3700

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact