Analysis
-
max time kernel
106s -
max time network
113s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
-
submitted
15/02/2023, 16:37
General
-
Target
it/dado997/BossMania/Gui/Button.class
-
Size
1KB
-
MD5
b42396c8de8e9a808fe49f5a7133251a
-
SHA1
b64448705252e3b37d580ada916cb1b697347ef6
-
SHA256
4bea4964bb1f9d6987ab51224d3dcae51e6ea19ff8f2be535dca0fcf5374f96e
-
SHA512
46a09d4cc2006068f0f3a967018fda4a2bab5298ad293db6ccff133163106459e5af15c0c2c86a5b5fdc17115524d688dd80dca990df1847e9d4a1353c95452d
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\it\dado997\BossMania\Gui\Button.class1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx