6c21c5a5b9f8939d3468ff98fb4e86c17a0e230a2b9433835a503d392be97ca6

Analysis

user interaction
yes
max time kernel
56s
max time network
39s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/10/2026, 03:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Cursed.exe
Size 4.7MB
Sample261024-efn3vaeb86
SHA256 6c21c5a5b9f8939d3468ff98fb4e86c17a0e230a2b9433835a503d392be97ca6
MD5 710d41d6504be65dc984d0458ec0710d
SHA1 a7a91ded0ec806632e54c8f5f3058a9883db8ff9
SHA512 97c06be8d6300b3e986074bc42e50d0c994bbb971d4eb122b383ffb4862d804fe5018a773cfde9fdffc452b401e02e8e3115b31d372744c08466964a5003cbd7
SSDEEP 49152:80gmXgB9GHYDpQTYh5jQXVLQXVrQXVUmj3aCBX+smh4jd4qblsmh4jd4qQFa:80gmXgB9SYv2+CUshNJshN
TLSH
T16936AF02F79BA1ADC05AC47483476A33BB31788E1B35AAE752D455393E66BE01F38F14
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
4632	Cursed.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 616 wrote to memory of 4632	616	Cursed.exe	84

C:\Users\Admin\AppData\Local\Temp\Cursed.exe
"C:\Users\Admin\AppData\Local\Temp\Cursed.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:616
- C:\Cursed\Cursed.exe
  "C:\Cursed\Cursed.exe"
  2⤵
  - Executes dropped EXE
  PID:4632

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Cursed.exe

Path C:\Cursed\Cursed.exe
Size 4.7MB
SHA256 6c21c5a5b9f8939d3468ff98fb4e86c17a0e230a2b9433835a503d392be97ca6
MD5 710d41d6504be65dc984d0458ec0710d
SHA1 a7a91ded0ec806632e54c8f5f3058a9883db8ff9
SHA512 97c06be8d6300b3e986074bc42e50d0c994bbb971d4eb122b383ffb4862d804fe5018a773cfde9fdffc452b401e02e8e3115b31d372744c08466964a5003cbd7
SSDEEP 49152:80gmXgB9GHYDpQTYh5jQXVLQXVrQXVUmj3aCBX+smh4jd4qblsmh4jd4qQFa:80gmXgB9SYv2+CUshNJshN
TLSH
T16936AF02F79BA1ADC05AC47483476A33BB31788E1B35AAE752D455393E66BE01F38F14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download