3e0edc26a6c25555317b55043401ddf30c41f1e7654531a76fa85f23b8e9f371

Analysis

max time kernel
298s
max time network
239s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/07/2026, 09:38

Target
Game Files/Moorhun Kart 2 Setup/ikernel.ex_
Size 339KB
Sample260711-ll45kshv6v
SHA256 3e0edc26a6c25555317b55043401ddf30c41f1e7654531a76fa85f23b8e9f371
MD5 1e2647eced4ec4d2e735b0159c943cd5
SHA1 aaf46313501e6d11238ba1d4fa8c0ecd6673cf0d
SHA512 88185cf439bde9e5c0baee2395170a4a4237386a277ae8871066ff72dc3a7b569ce32b519f7f484ec3d814398cea9b51a7f187f592ce8fdf916d03f0b131cee7
SSDEEP 6144:hXK+IYHfL/RpB8okDqnFzqJXtNveAYD0Iod4rhsm+HeHF/zUeftpkojruas:BKjYHf7RfnBqpt5e3+mh5++Hpzvf1jzs
TLSH
T16E742363EEDB81F784D6490AD635B73E65C3BB810527CE3B039F968791304F529628CA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5144	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Game Files\Moorhun Kart 2 Setup\ikernel.ex_"
1⤵
- Modifies registry class
PID:5504

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact