Analysis
-
max time kernel
47s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
-
submitted
22/03/2023, 11:51
General
-
Target
Super marzo en Lantern Festival 2x1 lunes y martes ¡Y mucho más!.eml
-
Size
28KB
-
MD5
fb0ede0cb7e728722b853dc746d0bb87
-
SHA1
5901ab2b7f0033858368c8cd0906780bd4d6f73c
-
SHA256
c13dbe4f8e09e333e5479ac5d7040fbef9c5ad2a462ce8c123950814f82116d3
-
SHA512
fe0a71f3ee4443554b9fc9568d4032432e5c98c1167c85700ba54eee0ef99b7e5df2a614d2b4f61a33a0401a3f413dd76098c775e109575732c880c714159452
-
SSDEEP
384:EH4rH4DA6qPP7qvLiOoVdB6FibeIJ0xoiKmxQaozbm7BoToGow9OoSZmon0oMAqy:JrYs6qPP7qvLiOoVdf0XvQR6d6wYG
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Modifies registry class 2 IoCs
-
NTFS ADS 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\Super marzo en Lantern Festival 2x1 lunes y martes ¡Y mucho más!.eml"1⤵
- Modifies registry class
- NTFS ADS
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx