Analysis

  • max time kernel
    150s
  • max time network
    135s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    06/08/2026, 07:47

General

  • Target
    5ab4d7193745e89e6c6edb235a849c33073f85a02a6c466ad7123064df3b6021.exe
  • Size 2.1MB
  • Sample260806-jmh8dsfq5v
  • SHA256 5ab4d7193745e89e6c6edb235a849c33073f85a02a6c466ad7123064df3b6021
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5ab4d7193745e89e6c6edb235a849c33073f85a02a6c466ad7123064df3b6021.exe
    "C:\Users\Admin\AppData\Local\Temp\5ab4d7193745e89e6c6edb235a849c33073f85a02a6c466ad7123064df3b6021.exe"
    1⤵
    • Enumerates connected drives
    • Suspicious use of SetWindowsHookEx
    PID:2804

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        BGI.log

        • Path C:\Users\Admin\AppData\Local\Temp\BGI.log
        • Size 3KB
        • SHA256 0b347dd3784187996dd2443a8abd61100e6c76cb928b165a7119ec8d16f6e6f3
        • MD5 SHA1 SHA512 TLSH

        BGI.log

        • Path C:\Users\Admin\AppData\Local\Temp\BGI.log
        • Size 4KB
        • SHA256 540392b4655e9c2a90cd96bb02732513189eb111830b7aa8577ad4f616fa88b3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        BGI.log

        • Path C:\Users\Admin\AppData\Local\Temp\BGI.log
        • Size 1KB
        • SHA256 6c8ff162fd5bd8d78297fd77cb6829828d1a8af9332f5b92bf46b9732bb6e00c
        • MD5 SHA1 SHA512 TLSH

        BGI.log

        • Path C:\Users\Admin\AppData\Local\Temp\BGI.log
        • Size 2KB
        • SHA256 371fc4a01d3e0f54b2a7bb25a2aa77751edeafa478278198392b72272117f52f
        • MD5 SHA1 SHA512 TLSH

        BGI.log

        • Path C:\Users\Admin\AppData\Local\Temp\BGI.log
        • Size 2KB
        • SHA256 a4100ee1c04cf833b7a98cf5e1de6ad47ee3a0cd167b8642f22bb97c6c2258f7
        • MD5 SHA1 SHA512 TLSH

        BGI.log

        • Path C:\Users\Admin\AppData\Local\Temp\BGI.log
        • Size 2KB
        • SHA256 ca321a80cc80d8f001694525626a73df0d8a84d7863cd40cf6a19021420342c4
        • MD5 SHA1 SHA512 TLSH

        BGI.log

        • Path C:\Users\Admin\AppData\Local\Temp\BGI.log
        • Size 3KB
        • SHA256 48b83bdfa2b0e3b2325d8cc416f67c009a85d78786876a5c47972d5991dfca18
        • MD5 SHA1 SHA512 TLSH

        BGI.log

        • Path C:\Users\Admin\AppData\Local\Temp\BGI.log
        • Size 3KB
        • SHA256 7b68bf8d3cb9eaa0b8ff48d35c18227ad6257c2be58dc99a67c8139cf59a7795
        • MD5 SHA1 SHA512 TLSH

        memory/2804-213-0x00000269B3FA0000-0x00000269B43AA000-memory.dmp