5325b18de24aee0a93da14f4033a6f65ffb6ba4d9ed98d5e6e25f5b0afad78d9

Analysis

user interaction
yes
max time kernel
150s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/09/2026, 16:37

Target
cfg + skeet/skeet.exe
Size 6.0MB
Sample260926-t4wvxsysbv
SHA256 5325b18de24aee0a93da14f4033a6f65ffb6ba4d9ed98d5e6e25f5b0afad78d9
MD5 531eae6efe99e7a256dd1244f36e321a
SHA1 716f8f034d0bf684fe663993ac613b23c5753e18
SHA512 9f608a2a796f208bacbc4462184d0616d8b294b85572504447849eb6cb4a3d222bbf7f778a52dcdb6da0f7d191587e33eb94eb9659d0a7565995af86f3fc6bb9
SSDEEP 98304:CeAKYiOp9nvIT85zNcxnu4H8uBXwLi83j/78:RAKbOA8HehTwLJz/g
TLSH
T15156AE07F78151EDD02BD57886A7632BE231B4460B3157DB13846A396EA37E01F3AB93
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings	skeet.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2676	skeet.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2844	OpenWith.exe

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:2844