66e7c2250310a2898127a9901b0f0ada4b74f0f039c5bdd6ea476e2282fc7304

Analysis

max time kernel
150s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/11/2026, 01:00

Target
66e7c2250310a2898127a9901b0f0ada4b74f0f039c5bdd6ea476e2282fc7304.exe
Size 5.8MB
Sample261113-bc2b8ayt9m
SHA256 66e7c2250310a2898127a9901b0f0ada4b74f0f039c5bdd6ea476e2282fc7304
MD5 309b035eadcfd09c6924fe672159b307
SHA1 e6d051ce80dc2d43b7da4238d66e5008440b2b94
SHA512 ea1c333782175b981cd29a8100ec884fa9a4f905391576ff99018e802bc88865e87ff3303d66eb42b1e07ec3f7a61acfaa38139aabfe3b6f267e2a54e078c975
SSDEEP 98304:cljfrXa+iAdCSVIzyh6/FgTK0SSkh0V2KwRa:cBTaK4SVIzyh6/FgTK0SSd2Lc
TLSH
T199569C1013EA06A0FA7BEA38C265A633C7717C565732C14E0459A6B92F73E51CF7B722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4280978039-528710165-233981602-1000_Classes\Local Settings	66e7c2250310a2898127a9901b0f0ada4b74f0f039c5bdd6ea476e2282fc7304.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4564	OpenWith.exe

C:\Users\Admin\AppData\Local\Temp\66e7c2250310a2898127a9901b0f0ada4b74f0f039c5bdd6ea476e2282fc7304.exe
"C:\Users\Admin\AppData\Local\Temp\66e7c2250310a2898127a9901b0f0ada4b74f0f039c5bdd6ea476e2282fc7304.exe"
1⤵
- Modifies registry class
PID:5236

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:4564

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact