Analysis
-
max time kernel
127s -
max time network
134s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
12-07-2023 18:32
General
-
Target
Metalslugdefense1.15.0.apk
-
Size
27.7MB
-
MD5
c26f7509d98bd4551608b61ba1a65744
-
SHA1
77e3a111411f08fb7efb91f4258f0bd16c4b6563
-
SHA256
99d93b7349356e0b5686696b91e559dd323bc56eb1b2f72de3fa6b174c9ed093
-
SHA512
5eb2e6e01e35590967e97b2e30a546a0950f178b9d30611b7a02ee731338b94da97452dd32a2b33eca1bad435149cdbaef99e82290e168f7c5bc409e91735836
-
SSDEEP
786432:Dcf5nfCsNkKb5g9J0CsB5kNTdmlEEf78FIniy9IpDrfZ:DchnfhN55gvmB+h4lP82iWIlZ
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Metalslugdefense1.15.0.apk1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx