b55a028f84f00359f1b91cb31929c7bfbab6700c59db0565237619b6c646a618

Resubmissions

02-06-2023 20:27

230602-y8lmzaeh2t 10

02-06-2023 20:26

230602-y73j4aeg9x 10

02-06-2023 20:25

230602-y7sd5aeg9t 10

Analysis

max time kernel
5s
max time network
9s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
02-06-2023 20:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Ahmyth.s.apk
Size

263KB
MD5

9c437c14afe5e3294b8124485d1a6be0
SHA1

5d193da246c561380e5942af7782e95417c1ee9e
SHA256

b55a028f84f00359f1b91cb31929c7bfbab6700c59db0565237619b6c646a618
SHA512

3006c1c73189bda0bac66068d9b190d67f9dca0213d0bcf49a143778514307bfca51ece89dce11a43f77da0c11c102caa5732dd531c14919bd57b2c66c6a0c42
SSDEEP

6144:kY1S/SJ7uVFrPzdmvkE75mEiKfZdksXnuAhAFINx90q:Y87u1mc65fiKfXnuoA09t

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1675742406-747946869-1029867430-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-1675742406-747946869-1029867430-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4388	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Ahmyth.s.apk
1⤵
- Modifies registry class
PID:4680

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4388

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads