fb1c2c04a406ee41797d248f505c81f8095bacdb34161e0469b2a58c61c3b963

Analysis

max time kernel
149s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/08/2026, 01:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
matepath.exe
Size 775KB
Sample260820-b8fqdsdk8w
SHA256 fb1c2c04a406ee41797d248f505c81f8095bacdb34161e0469b2a58c61c3b963
MD5 a508d374e9198d8b9eacbd38acec2cad
SHA1 2c6ed75353d9c910498ecb37d7d9339b59328208
SHA512 6da9e3b955768a08e35708e70d8b1b2b31f2b45d399ada2ea22811f1db6037e5beca2a5bbe802e74b1df9b84e3342df78600aa2c64bfd7fd2c3bdfdbfd96538c
SSDEEP 6144:4D2/k89ifLcy6HbWbXKSuBW9HIZd0hiZ9ibWwINq+9kbuE9e6j6pXZ:K2/k5jj6HXbEHOdNidgrZ
TLSH
T13EF4BA223412D64AC92202BDC15A6FB0DDF5BC2D6320DCFE24A9BD0FE5F9A48245579F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4960	matepath.exe

C:\Users\Admin\AppData\Local\Temp\matepath.exe
"C:\Users\Admin\AppData\Local\Temp\matepath.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:4960

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

matepath.ini

Path C:\Users\Admin\AppData\Local\Temp\matepath.ini
Size 1KB
SHA256 28628f748614d45bf10e87964ab9ad5d9c16c9f4b0e8dee5c487ab0d781207df
MD5 2357b36d3de539c3791115c06ed1ec49
SHA1 2ae7e8bd1010650c8faa7c9f5494be9d44421bbc
SHA512 9a4954b70dd9a92f8dafd761367460e8ccd90cb909bf1d6cce3966640db1224eb7f44d77bd487551a04965d612e471a7f56570c66b94389ac1ba5edca4e79c87
TLSH
T13921F00737E61F08F9FBDA14AA7BF2A00A3D7955D919C35D62CC604D08E2A14C863FA3
MD5 SHA1 SHA512 TLSH

Submit Download