Analysis
-
max time kernel
237s -
max time network
430s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
23-11-2022 19:20
General
-
Target
Struts2神器集合/struts2漏洞利用/Jar版/Struts2Exp/Struts2Exploit$13.class
-
Size
729B
-
MD5
71c7e85c1098880267390a18a1d28fda
-
SHA1
3560783929969d2f075aeb4c4a0b586bc682f129
-
SHA256
38f6294a64799df4eb02351688d8ae4596109b7fb4f2a3c55aa2b4ff53f1896e
-
SHA512
233e0bc5a5e5b1fdc81340e1f845b09d60b14d67dc4918cd9b96958b86be6120e516e73da7e45159fb3ac8736fec2351a585675c531469171381109b10c4efb3
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Struts2神器集合\struts2漏洞利用\Jar版\Struts2Exp\Struts2Exploit$13.class1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx