6aa88429f1559147c679a15fb0a25f6bbba6de8a29abaf995ede4dd6cbb09960

Resubmissions

25/08/2026, 23:46

260825-3sstkaxtes3

25/08/2026, 23:00

260825-2zed3sw1dy3

Analysis

user interaction
yes
max time kernel
86s
max time network
87s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/08/2026, 23:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
m0nkrus.nfo
Size 1KB
Sample260825-2zed3sw1dy
SHA256 6aa88429f1559147c679a15fb0a25f6bbba6de8a29abaf995ede4dd6cbb09960
MD5 f4d837dca0de92b0fdd59a52c1b4d5db
SHA1 8196628d949ed5d1a9f198fe6838b647f0d9c14f
SHA512 4b93cff8f40c094461c75e5b1ac0392b318699ecf240641e75997473083b27d2e05a3aeb3f2c636acadeb45d56ebbbe629e32b8d4460803f5f6b6d5d1f81c2c9
TLSH
T16E2124073406758B0E3D8D81679DCE34DF0109A78B2A99F1376EA7D89B61314659841C
MD5 SHA1 SHA512 TLSH

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 4 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	msinfo32.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\ECFirmwareMajorRelease	msinfo32.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\ECFirmwareMinorRelease	msinfo32.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msinfo32.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2936	msinfo32.exe

C:\Windows\system32\msinfo32.exe
C:\Windows\system32\msinfo32.exe "C:\Users\Admin\AppData\Local\Temp\m0nkrus.nfo"
1⤵
- Enumerates system info in registry
- Suspicious behavior: GetForegroundWindowSpam
PID:2936

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads