Analysis
-
max time kernel
53s -
max time network
75s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
-
submitted
15/02/2023, 16:37
General
-
Target
it/dado997/BossMania/Events/BossEvent.class
-
Size
933B
-
MD5
8962dbaa68b7ffa9e41b8f198221d227
-
SHA1
3298dfac2c0b39dbc986c1c56f01f55fcf45ec32
-
SHA256
65d50824fd2805c8b3d7fd26634c8e03794cab251e68dbe1909db233e35e820d
-
SHA512
dedcac4996ef44d665dec757bc093726cbe0862a009abf475cf7a81bcb0baa6ea3def2d72a577839b8788dab9c0fb86b45264f8f7bb833b5fc9d9b466bd306a4
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\it\dado997\BossMania\Events\BossEvent.class1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx