7d260684ed90d942f59ac5d51400413540f085c9c8cb68c3eb7a3c19d5a3d7c6

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/08/2026, 01:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
matepath.exe
Size 280KB
Sample260820-b8fqdsdk8x
SHA256 7d260684ed90d942f59ac5d51400413540f085c9c8cb68c3eb7a3c19d5a3d7c6
MD5 3939a47ee1b294ac786eb76494a5c2a3
SHA1 e3e584e388549ad06bfaf0301b78d1a55cb0d137
SHA512 1d3af3a0083803215a7572882acc502700bb16b23fd7d1e5bbd654ff67512bd47f372e926631bf5057f81a50f83d340f4577e594c5b46b9fd0d4facf7965cb3f
SSDEEP 6144:t3YvM8jOaacVjMu9WbX2f56wFgkd0hmPWwINq+9kbuhoXZ:xYvMGOaacBMuNfFFfdntZ
TLSH
T1D0542812B6B449D9D923817C84838A52DE72FC142720DDEB26A1F92E5FB35D1BC39B31
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4908	matepath.exe

C:\Users\Admin\AppData\Local\Temp\matepath.exe
"C:\Users\Admin\AppData\Local\Temp\matepath.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:4908

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

matepath.ini

Path C:\Users\Admin\AppData\Local\Temp\matepath.ini
Size 1KB
SHA256 28628f748614d45bf10e87964ab9ad5d9c16c9f4b0e8dee5c487ab0d781207df
MD5 2357b36d3de539c3791115c06ed1ec49
SHA1 2ae7e8bd1010650c8faa7c9f5494be9d44421bbc
SHA512 9a4954b70dd9a92f8dafd761367460e8ccd90cb909bf1d6cce3966640db1224eb7f44d77bd487551a04965d612e471a7f56570c66b94389ac1ba5edca4e79c87
TLSH
T13921F00737E61F08F9FBDA14AA7BF2A00A3D7955D919C35D62CC604D08E2A14C863FA3
MD5 SHA1 SHA512 TLSH

Submit Download