Analysis
-
max time kernel
141s -
max time network
199s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
20/05/2023, 21:40
General
-
Target
SESmartID/Controller/View/SmartIDRoiView.h
-
Size
605B
-
MD5
ae1c985efe540f8f26977aa4c2ca2143
-
SHA1
779ab331aa0524eaf86b785a6c1e60e9e0ecb92d
-
SHA256
d5d99249e17bab709fc4454ac73d4062232e533da982c5e7cf54cffb115e94e2
-
SHA512
a9fe2bd41f1202b09bcc4ed3bbfff972705fbb4aee6a247f61d62f444577319f7e5a0c1b94f3a5ed8ac9fe7a4db551bb595e61352c177659a10b3007d8a641e8
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\SESmartID\Controller\View\SmartIDRoiView.h1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx