085d0a0dd56e015026119b0e720202f50eab3622f8618eaa0157d4fc7c92ea68

Analysis

max time kernel
598s
max time network
490s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
12/07/2026, 15:36

Target
VareiaExe/Vareia_Data/sharedassets0.assets.ress
Size 6.0MB
Sample260712-s2d2naet4y
SHA256 085d0a0dd56e015026119b0e720202f50eab3622f8618eaa0157d4fc7c92ea68
MD5 654717c8986edabe25551f3973bfcc9c
SHA1 f698854d8387873b3d976bc0ee2f67505acead81
SHA512 dbc1df1c289b381f3b4004f23c178e7ef2d179fd9f9537128a8608a0874622b86796c167f3c056c128e0c2c83d206a2de26f75ad9628474d94fb4a1c7d8afbec
SSDEEP 98304:F98r61OBV6ZGVQlllXAiZ7Go4rOCHt/4i5IBuML:F9VwV6qQdXAiZ7/4rOeZ5IB
TLSH
T1C2561723D485F5DFD40AA8FCE63B7296D0AF0A7D9B058FD1284B9846C56B4B383580DE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4146128427-3460078792-3629963422-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-4146128427-3460078792-3629963422-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3920	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\VareiaExe\Vareia_Data\sharedassets0.assets.ress
1⤵
- Modifies registry class
PID:4588

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact