287330d6b24150da781995a2fd8b0b57e60c68d58bfbea9a6a789d338e62297c

Resubmissions

04-07-2023 15:33

230704-szn4vagf3x 10

04-07-2023 15:15

230704-smwyxsgb21 5

Analysis

max time kernel
6s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
04-07-2023 15:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

NOTIFICACIÓN ADMISIÓN DE TUTELA RADICADO 2023-6840562-18223-1150..msg
Size

86KB
MD5

068ffdc02f1552e8b7817e1e7007e88a
SHA1

c93960bf3f475178277865c4021c7b8e74738740
SHA256

287330d6b24150da781995a2fd8b0b57e60c68d58bfbea9a6a789d338e62297c
SHA512

09fee4ffbdce1954554cea8d45cef2f46591fdf3c9e489099a4100d1ccb9e07d1fea5adba8c2ced939eaa9cbc7aac50f3e6e3bbc381de7dd509acf3ee590c18c
SSDEEP

1536:AYSWIW2TnneVKWj7K8tU6PWlL4V6/IlKWgIpnRcTV4:A3yN7Q6F7DjpnWp

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

Processes:

OpenWith.execmd.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-1498570331-2313266200-788959944-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-1498570331-2313266200-788959944-1000_Classes\Local Settings	cmd.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

OpenWith.exe

pid process

1540 OpenWith.exe

pid	process
1540	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\NOTIFICACIÓN ADMISIÓN DE TUTELA RADICADO 2023-6840562-18223-1150..msg"
1⤵
- Modifies registry class
PID:4796

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1540

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix ATT&CK v6

Replay Monitor

Loading Replay Monitor...

Downloads