9b96b9389efe05a6ced59239e349b2e71a3eb41d6a9ab93cda7fa17b9a6f5639

Analysis

user interaction
yes
max time kernel
298s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 17:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
isaac-save-installer.exe
Size 648KB
Sample260910-vt25maen2t
SHA256 9b96b9389efe05a6ced59239e349b2e71a3eb41d6a9ab93cda7fa17b9a6f5639
MD5 d86669475dfa5f1fb70972080d670560
SHA1 3a12130084266309055112dcb3b1f3a32c232f78
SHA512 d8198b8938f2b0df957e244b7653a5a0a25a6e3409e92340dfe0b0e77df8d4029939c496a2de11e23b4953e2c86ed96c6a953826cdf995e85ac0584e8848378d
SSDEEP 12288:lzRiUx0GRHoDa6muE3Wvo6a2MIk27DyyqPd5/8ld:lzRxx0+HoDahVfYMqHyyqVKld
TLSH
T15DE42B25BB5599ADC45AC07483864A727B71B0CA0F32AAFF01844139FE6EAF51F3C758
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Enumerates connected drives 3 TTPs 1 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\F:	isaac-save-installer.exe

Suspicious behavior: EnumeratesProcesses 3 IoCs

pid	Process
4148	isaac-save-installer.exe
4148	isaac-save-installer.exe
4148	isaac-save-installer.exe

C:\Users\Admin\AppData\Local\Temp\isaac-save-installer.exe
"C:\Users\Admin\AppData\Local\Temp\isaac-save-installer.exe"
1⤵
- Enumerates connected drives
- Suspicious behavior: EnumeratesProcesses
PID:4148

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads