Analysis
-
max time kernel
135s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
20/05/2023, 14:50
General
-
Target
dark/cursor/handwriting.cur
-
Size
4KB
-
MD5
3aee2112f22d1ee83343710aa9b5fe93
-
SHA1
059ffc3ec917ab8c252034fffb9c2a6ef224d0d2
-
SHA256
f6133572f9e516808919d1b7ef6de0003a4edda020f2cbe3ddd514c2658de28d
-
SHA512
20e21dd5c87319dc971c57c5076fa9247364e18b0c7886ab3358113041d3b4818519d0b8282f0cd01c3e1ed3e066ef97353f10cd662b981baaf788926586287e
-
SSDEEP
24:NEZB4lEXn0MY8WtOZJuq+EJHKluuUCUF1yOYbNxxz3hYUOkr:yZK805YZJuq+QH++CUrOZWCr
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\dark\cursor\handwriting.cur1⤵