Analysis
-
max time kernel
142s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
21-03-2023 23:12
General
-
Target
APT 37 Previous Commits 1/20220315-112_Notice.rar
-
Size
3KB
-
MD5
75fe480a0669e80369eaf640857c27cd
-
SHA1
6845db568fabef46944bd0afed55b94cf2ffa5fb
-
SHA256
ac31880c5a10e7227064b7098a2e73e5001349123b0e9b6ac2aa8efa055d73fa
-
SHA512
2074d50ebc5b893183c659cbc48c81924347c69fe05559141d708efbef8231508628c7a20d3b448d747f478731d91c8c0d8a07b6bc408ed3209cd7a3889fc045
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\APT 37 Previous Commits 1\20220315-112_Notice.rar"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx