Analysis
-
max time kernel
1229s -
max time network
1233s -
platform
windows10-2004_x64 -
resource
win10v2004-20230621-en -
resource tags
-
submitted
01/07/2023, 15:36
General
-
Target
controlloid-server-master/README.md
-
Size
1KB
-
MD5
e330c78a3fe144d9a5c6e0ff115b2294
-
SHA1
03b7e624a570764b2408b1929b4dbcddd0bea1f7
-
SHA256
ef508132ced0fa11fdf5b209bea2b51a0ecc0c78d9d6538580d3520062d44dd0
-
SHA512
e984a8256e3b79824564f7ef112ce93de23919f0c42d7fa2111d3b3428ec89f5b2b016f7ae093b292b3f9fda134d20da91f36ad71cfdde89d61a8570ecc29898
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\controlloid-server-master\README.md1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx