Analysis
-
max time kernel
71s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
18/12/2022, 18:06
General
-
Target
Fluent-for-Steam-0.4.4.2fix/friends/chatinvitenotification.res
-
Size
2KB
-
MD5
3eb118136cea98c9f4e985f84e43cf2a
-
SHA1
d52fe7e8f34c8e3730002a5436f37a5c289f337e
-
SHA256
1844fb4c114972781aec16f3a15625b864bddec0ef81ad48eb87f3e6c253073c
-
SHA512
fafda7193ab6030f41b8e1c8145f390da188ef12bd74d235445decb25dfd18a787eb0f476ae0e4f798ca58431578b300c2c4cb60cc12aa0dfeded6042247aa02
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Fluent-for-Steam-0.4.4.2fix\friends\chatinvitenotification.res1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx