Analysis
- max time kernel
91s - max time network
155s - platform
windows10-2004_x64 - resource
win10v2004-20220414-en - resource tags
- submitted
18/07/2022, 04:33
General
- Target SecuriteInfo.com.W32.AIDetect.malware2.21162.exe
- Size 1.4MB
- Sample220718-e6hzhsafbm
- SHA256 24c617f6c994a7a2f8520020365669fbd3cf5535f893118cefc39401394c2e15
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
- Suspicious use of SetWindowsHookEx 3 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.W32.AIDetect.malware2.21162.exe"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.W32.AIDetect.malware2.21162.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\cmd.execmd.exe /c C:\Users\Admin\AppData\Local\Temp\2⤵
-