30b8c3961c0e601c3d2549a6ad416480584071e0da0c8d2afc1b2e76a59e4141

Analysis

max time kernel
298s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/11/2026, 12:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Castle Crashers (2012) by (Hemerson Soares)/fan-cacr.nfo
Size 2KB
Sample261107-padp2abv31
SHA256 30b8c3961c0e601c3d2549a6ad416480584071e0da0c8d2afc1b2e76a59e4141
MD5 02480e97cff291e44c9ab54018a72e7b
SHA1 02317f5844067e10de853b1230a2ac45d7b2d061
SHA512 1b71bc0e701cee0d287d7a966af2591bb8d5739bdbbacef17ed4c482555cfeb962026972dcfd38de04bdf862818fb48302193178cf7908a62cd5fc141b80ef13
TLSH
T13641224973D2240E6B12D214D496B4C091481F8621232AD8768CB7DC6B7D7C4F3D6AFF
MD5 SHA1 SHA512 TLSH

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 4 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msinfo32.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	msinfo32.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\ECFirmwareMajorRelease	msinfo32.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\ECFirmwareMinorRelease	msinfo32.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5532	msinfo32.exe

C:\Windows\system32\msinfo32.exe
C:\Windows\system32\msinfo32.exe "C:\Users\Admin\AppData\Local\Temp\Castle Crashers (2012) by (Hemerson Soares)\fan-cacr.nfo"
1⤵
- Enumerates system info in registry
- Suspicious behavior: GetForegroundWindowSpam
PID:5532

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads