c414a85d9e36c82c7175599c06d9cd3c4e229434149c8cdd122a65f8671f6238

Analysis

max time kernel
135s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
14/06/2023, 20:51

Target

ParanoidCheckerLogs (crackerbyINFLUSE).rar
Size

148KB
MD5

4a2c9c960b47068452c086f8767f0696
SHA1

2666fd82b79e1611338998a84845caccfda812a1
SHA256

c414a85d9e36c82c7175599c06d9cd3c4e229434149c8cdd122a65f8671f6238
SHA512

b115973bbc5a58fbe7fce62429c593530187252a075851739d6714ddc3a4c794388b519bc0163c001c74f3c8601c932003541a2f3e8b0d482cee4c69b7fa27e4
SSDEEP

3072:n120ABr1Qsmupc4WOsVX4BeECEOdA7RQlBj1fQON9Huadydg7AV:12XrislpwVXhEU0RQThz9O0yX

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2805025096-2326403612-4231045514-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-2805025096-2326403612-4231045514-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 3 IoCs

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\ParanoidCheckerLogs (crackerbyINFLUSE).rar"
1⤵
- Modifies registry class
PID:4616

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact