Analysis
-
max time kernel
1687s -
max time network
1521s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
25-11-2022 20:43
General
-
Target
Stargate Simulator/Engine/Stargate Simulator/SG/logikaSG.cpp
-
Size
425KB
-
MD5
0b096522458ca1365654cd1f86b69fa9
-
SHA1
f1a98e7725c63f1215a4013fc22e0f77619d42f7
-
SHA256
f9ff15a87a12195d5330bb013eb9bf60bbe41c0aa21b469cbec89d1ec284a78e
-
SHA512
f907ded845d12472efc550f415b47b2d3d168c4f037d048e9a0a8610aee89ccd1f5d7eed4e5343ef19ea0e7ffaee06ea46643f822fa64e4192c11514ef5dda0f
-
SSDEEP
6144:aeq3TyRAXW1k5N8xePEFCTM8/mpobil0TNmnwJyDcFrY:H
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\Stargate Simulator\Engine\Stargate Simulator\SG\logikaSG.cpp"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx