Analysis
-
max time kernel
138s -
max time network
148s -
platform
windows10-1703_x64 -
resource
win10-20230220-en -
resource tags
-
submitted
31/03/2023, 16:07
General
-
Target
a/S.class
-
Size
2KB
-
MD5
709fd286e42123b0acce010b757e3424
-
SHA1
f9484385398464af98897042a93686dc253cda7a
-
SHA256
a448bd9527a59cbda704d9a861fc3c342640c9828c6bc5e80d3c967aa46f76e5
-
SHA512
8f7c79ba358c6f8031e758e13c99ac1be21751235a1be2e03e4174a50d71635220db92c86151be3ebfd1f143cb1547fcbb372461b5b2c71fc02a6232b54f3064
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\a\S.class1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx