Analysis
-
max time kernel
54s -
max time network
147s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
-
submitted
15-02-2023 16:37
General
-
Target
it/dado997/BossMania/Commands/SubCommand.class
-
Size
1KB
-
MD5
d76e21e88dfaf5488420ae1b1ee40cff
-
SHA1
59e44632959f0695a6c773bca2da85e592ea4f9b
-
SHA256
9f80df8fb1af2fd8ade710e5181705390f1690f316a5e001e2eaac92a37bea9d
-
SHA512
000ca55367c06875bf4f870aa10532c34670ace6336ced790653f348ea44c50f27d2716db5db08055dbe057272998b5489471d98ff07dad031ff3e9603a2b8af
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\it\dado997\BossMania\Commands\SubCommand.class1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx